Apply different policies to computers in the same OU.

Question

We use several containers for computers based on admin rights or department used in. I would like to be able to have policies in place for Mac, Win7, Win8, tablets, etc. These devices would likely be mixed together in an OU. I read one suggestion where a security group would be created and the computer added to that group would get the policy. I have been unsuccessful in getting this to work. 
 I would appreciate any advice on how I can do this with out creating all new OU to put the different computers into as that would make our AD structure even more complicated. 
 
 Thank you

FormerMember · Answer

Hi WTAMU, 
 A mixture of different machines to have different policies under the same OU will be fine, you'll just need to make sure they're separated out in some fashion in order to apply the different policies. 
 Personally I would make the necessary changes under AD first, then sync over to SafeGuard. I know you say this makes things more complicated for you but the reason being is that the two structures are identical then so it keeps the two environments consistent. 
 You can then apply your main policy settings to the OU, then any machines to be excluded / have addition policies would be under a segregating subfolder in that OU, for example: OU > Computers > Faculty and OU > Computers > Students as a really simple example. 
 You might set the Faculty folder to block policy inheritance and give them an entirely new set of policies, but you might set an additional set of policies on the Students folder to lock their machines down even further. 
 I hope this all makes sense, but do please let me know if you have any further questions on this.