Ok. So I am assuming from your description that you are trying to filter user policy by user group. The question here is, are you logging into the workstation with a user account that is a member of the admin groups that have deny access? If so, then the deny will override any grant.
Darren -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Lagreca Sent: Thursday, February 23, 2006 12:55 PM To: [email protected] Subject: Re: [ActiveDir] GPO Security Filtering to a group not working Authenticated users was removed from the GPO. I have deny "apply group policy" only for all the admin groups, so I don't accidentally appy the GPO to any of them. The group I am trying to apply the GPO to, is not part of any other group. Joe On 2/23/06, Darren Mar-Elia <[EMAIL PROTECTED]> wrote: > Joe- > Are you removing the Authenticated Users ACE before you add the > discretionary group? You don't have any Deny ACEs on that GPO, do you? > > Darren > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Joe Lagreca > Sent: Thursday, February 23, 2006 10:08 AM > To: [email protected] > Subject: [ActiveDir] GPO Security Filtering to a group not working > > I am trying to implement GPO Security Filtering to groups without any > luck. > > When I run gpresult on the workstation, I get "Filtering: Denied > (Security)". > > However I have delegation, I have given the group both read and apply > policy permissions. > > When I try GPO Security Filtering for either a single user, or the > built in authenticated users group, it works fine. I just can't seem > to get it to work with the group I have created. > > Has anyone experienced this before or know what I am doing wrong? I > have tried it with both domain local and global security groups. > Thanks. > > Joe > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
