Re: Apply GP to group of computers

Tech-Archive recommends: Fix windows errors by optimizing your registry



That worked. Thanks

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:uxRDdG15GHA.756@xxxxxxxxxxxxxxxxxxxxxxx
Try rebooting the computer.
When the machine$ account logged into the domain it obtained
the list of group memberships it had at that time.
You changed that in one case (filter by group), but not in the other
case (filter by machine account).
Rebooting forces fresh login, meaning the membership in the new
group is seen - all just as happens with users and new memberships.

"Mike" <none@xxxxxxxxxxxxx> wrote in message
news:eeqbm3x5GHA.2168@xxxxxxxxxxxxxxxxxxxxxxx
I have a GP that I need appied to a group of computers. If I add the
computer accounts to a security group, and put that group in security
filtering(GPMC), when I try to run that GP from the computer, it says it
is access denied. However, if I add the computer accounts one at a time,
to Security Filtering, instead of the security group, it works fine. Is
this normal behavior for GP to not recognize security groups?





.



Relevant Pages

  • Re: Apply GP to group of computers
    ... Try rebooting the computer. ... When the machine$ account logged into the domain it obtained ... group is seen - all just as happens with users and new memberships. ... Security Filtering, instead of the security group, it works fine. ...
    (microsoft.public.windows.group_policy)
  • Re: Unlock acct permissions
    ... >>>>-->>Joe Richards Microsoft MVP Windows Server Directory Services>>www.joeware.net>> ... I'm just trying to give a user>>>account unlock permission for an OU by making them a member of a security>>>group in that OU with permission to unloack accounts. ... Every one will have to full admins unless I can make>>>this Windows permissions work as desired. ... The correct permissions are on the security group, the user I>>>>>added to the security group still cannot do anything with account unlock or>>>>>password reset. ...
    (microsoft.public.win2000.active_directory)
  • RE: access denied in event viewer after in-place upgrade to Windows 20
    ... you open event viewer logs on DC, both the in place upgraded win2k3 DC and ... I understand that you have tried to add the account into Enterprise admin, ... built-in Guest domain security group or Domain Guests security groups. ...
    (microsoft.public.windows.server.migration)
  • Re: GP/OU Problem/Question
    ... account in the TerminalServers OU. ... as a DC and a separate Windows 2003 member server as the TS. ... If creating a separate Security Group for 'TS Users', ...
    (microsoft.public.windows.terminal_services)
  • Re: granting folder access to network users
    ... It is really easier to work with groups for configuring permissions ... account is used for example form the windows installer when new software ... Please post the complete share permissions and the folder NTFS permissions, ... In AD create a security group and add the user to this group. ...
    (microsoft.public.windows.server.setup)