Re: Computer Group not applying to GPO in security filtering

I would recommend using RSoP to see which policies are actually processed to
the target computer, and which are not. Also, you can see the reason for
policies not processed - for examble, because of security filtering.


--
Dmitry Korolyov [d__k@xxxxxxxxxxxxxxxxxxxxxx]
MVP: Windows Server - Directory Services


"MVA" <mva@xxxxxxxxxx> wrote in message
news:OJMyo5cvFHA.3124@xxxxxxxxxxxxxxxxxxxxxxx
>I used Global Scope when setting up the group?At the moment I'm just adding
>the computers directly to the security filter of the GPO. It's working but
>very messy.
>
> "Dmitry Korolyov [MVP]" <d__k@xxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:egj%23AxGvFHA.3792@xxxxxxxxxxxxxxxxxxxxxxx
>> What kind of group (scope) are you using fore security filtering? You
>> should use only Global and Universal groups for such tasks.
>>
>>
>> --
>> Dmitry Korolyov [d__k@xxxxxxxxxxxxxxxxxxxxxx]
>> MVP: Windows Server - Directory Services
>>
>>
>> "MVA" <mva@xxxxxxxxxx> wrote in message
>> news:OHblncsuFHA.2948@xxxxxxxxxxxxxxxxxxxxxxx
>>> Hope someone can help me.
>>>
>>> I've setup a GPO called Offline Files.In this GPO I set the offline
>>> files settings under both Computer and User Configurations.Then I
>>> created a Group that contains all the users that I want the GPO to apply
>>> to. I then added the group under security filtering of the GPO. When I
>>> apply the GPO it apply's to all the users in the group that I setup
>>> previously and only the User Configuration part of the GPO is applied.
>>> This is all fine.
>>>
>>> Then I created another group containing all the PC that I want to apply
>>> the GPO too.I then added this group also to the GPO security filtering
>>> Sections.When I apply the GPO now, only the User Configuration sections
>>> is applied and not the Computer Configuration section of the GPO. Why?If
>>> I add the PC's directly to the Security Filtering section of the GPO,
>>> and not through a Group and then apply the GPO. The settings under the
>>> Computer Configuration sections is applied.
>>>
>>> Can anyone tell me what I'm doing wrong. Why is it , if I add the PC's
>>> to the GPO through a Group does the GPO not Apply but if I add the PC's
>>> directly to the GPO does it apply.
>>>
>>> Thanx
>>> MVA
>>>
>>
>>
>
>


.

Relevant Pages

  • Re: Disable Lock Computer on most computers but not all?
    ... you can use a security filtering for the GPO to accomplish that. ... group has denied "Apply policy" setting. ... However, since "Disable lock workstation" is a User Configuration setting, ...
    (microsoft.public.windows.group_policy)
  • Re: Block Group Policy Settings Based on Group Membership
    ... Perhaps the issue here is that this security filtering means that, ... users and computers who are targeted by a GPO, ... Let's say I have a GPO linked to the ...
    (microsoft.public.win2000.group_policy)
  • Re: Controlling user access to applications (Newbie question)
    ... Restriction policies, or better stil, here's a TechNet article ... create a TS-specific GPO, ... in the security filtering of the GPO, ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: Controlling user access to applications (Newbie question)
    ... Restriction policies, or better stil, here's a TechNet article ... create a TS-specific GPO, ... in the security filtering of the GPO, ... Software Restriction) doesn't apply to members of the ProjectUsers ...
    (microsoft.public.windows.terminal_services)
  • Re: Group Policy For Terminal Server
    ... the OU this applies to you will see a listing of the GPO's. ... right-click on it there and go into the Properties of the actual GPO, ... It does activate the right side Window which has a "Security Filtering" ... under the "Scope Tab", and there is a Delegation Tab. ...
    (microsoft.public.windows.terminal_services)