Joe-
Are you removing the Authenticated Users ACE before you add the
discretionary group? You don't have any Deny ACEs on that GPO, do you?

Darren 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Joe Lagreca
Sent: Thursday, February 23, 2006 10:08 AM
To: [email protected]
Subject: [ActiveDir] GPO Security Filtering to a group not working

I am trying to implement GPO Security Filtering to groups without any
luck.

When I run gpresult on the workstation, I get "Filtering: Denied
(Security)".

However I have delegation, I have given the group both read and apply
policy permissions.

When I try GPO Security Filtering for either a single user, or the built
in authenticated users group, it works fine.  I just can't seem to get
it to work with the group I have created.

Has anyone experienced this before or know what I am doing wrong?  I
have tried it with both domain local and global security groups. 
Thanks.

Joe
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to