Even if I applied it to an OU (not the root), if I left Authenticated users, it would apply the GPO to everyone in the OU, totally negating my whole problem of GPO filtering to groups within the domain or OU.
After more research, I found I wasn't crazy or doing things wrong. The problem was with windows (typical). The group I was trying to filter to, somehow had become corrupt. I created a new group, and did the same exact thing, and it worked. Also gpudate /force was getting funky on my winxp client test machine. It wasn't really updating the policy when I ran the command. It also didn't completely apply the policy when I logged out. I had to restart for it to work as advertised. Just thought I would let everyone know, in case you encounter the same problems. Thanks for all of your ideas! Joe On 2/23/06, Mark Parris <[EMAIL PROTECTED]> wrote: > Not unless you applied it at the root. Only members of the OU. > -----Original Message----- > From: "Joe Lagreca" <[EMAIL PROTECTED]> > Date: Thu, 23 Feb 2006 12:54:44 > To:[email protected] > Subject: Re: [ActiveDir] GPO Security Filtering to a group not working > > Yes, I did remove Authenticated users, or else the GPO would apply to > everyone in the domain, rather than just the group I am trying to > apply it to. > > On 2/23/06, Mark Parris <[EMAIL PROTECTED]> wrote: > > Have you removed Authenticated users from the GPO? > > -----Original Message----- > > From: "Joe Lagreca" <[EMAIL PROTECTED]> > > Date: Thu, 23 Feb 2006 10:08:10 > > To:[email protected] > > Subject: [ActiveDir] GPO Security Filtering to a group not working > > > > I am trying to implement GPO Security Filtering to groups without any luck. > > > > When I run gpresult on the workstation, I get "Filtering: Denied > > (Security)". > > > > However I have delegation, I have given the group both read and apply > > policy permissions. > > > > When I try GPO Security Filtering for either a single user, or the > > built in authenticated users group, it works fine. I just can't seem > > to get it to work with the group I have created. > > > > Has anyone experienced this before or know what I am doing wrong? I > > have tried it with both domain local and global security groups. > > Thanks. > > > > Joe > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
