Changed Domain Policy to only use one OU, but users from other OUs are showing up in reports
I've changed our Policy Configuration to select only one OU. However, when I run the 'non-enrolled users' report, it lists users that are NOT in the selected OU. (We have an OU for 'real' users, which I want to be able to use ADSS, and an OU for internal, back-end "system" accounts, which I do NOT want to be able to use ADSS, since those are for other computers, not people.)
How can I tell it to only look at one OU?
Thanks,
Karl