Authenticated users was removed from the GPO.

I have deny "apply group policy" only for all the admin groups, so I
don't accidentally appy the GPO to any of them.

The group I am trying to apply the GPO to, is not part of any other group.

Joe

On 2/23/06, Darren Mar-Elia <[EMAIL PROTECTED]> wrote:
> Joe-
> Are you removing the Authenticated Users ACE before you add the
> discretionary group? You don't have any Deny ACEs on that GPO, do you?
>
> Darren
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Joe Lagreca
> Sent: Thursday, February 23, 2006 10:08 AM
> To: [email protected]
> Subject: [ActiveDir] GPO Security Filtering to a group not working
>
> I am trying to implement GPO Security Filtering to groups without any
> luck.
>
> When I run gpresult on the workstation, I get "Filtering: Denied
> (Security)".
>
> However I have delegation, I have given the group both read and apply
> policy permissions.
>
> When I try GPO Security Filtering for either a single user, or the built
> in authenticated users group, it works fine.  I just can't seem to get
> it to work with the group I have created.
>
> Has anyone experienced this before or know what I am doing wrong?  I
> have tried it with both domain local and global security groups.
> Thanks.
>
> Joe
> List info   : http://www.activedir.org/List.aspx
> List FAQ    : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> List info   : http://www.activedir.org/List.aspx
> List FAQ    : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
>
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to