Re: Authenticated Users vs. Individual Users - Scope problem

Tech-Archive recommends: Fix windows errors by optimizing your registry



Howdie!

jlinhrst schrieb:
When I remove 'Authenticated Users' from the scope of a GPO and add either individual users or a group, the GPO will not apply. 'gpresult' shows an error related to the policy: 'Filtering: Not Applied(Unknown Reason).' The individual users and the group are a part of 'Authenticated Users,' so I would think that removing 'Authenticated Users' then adding the user or group to the GPO specifically would enable the GPO to apply to that user or group. I am using gpmc to deploy and manage my GPOs. Any thoughts?

What policy are we talking about?
Two things esentially need to be present: the users and computers need to be in the OU you linked the policy to and the users/computers need at least "Read" and "Apply" Group Policy rights.

If you replaced the "Authenticated Users" group with some other security groups, be sure people who shall apply the policy are member of it. If it's a Computer Configuration policy, be sure to add the Domain computers group there.

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
.



Relevant Pages

  • Re: GPO Problems
    ... The computer configuration part belongs to computers and the user configuration part to the user, so depending on the settings you must have the accounts located there. ... If rsop.msc or gpresult /v logged on with a user account doesn't give any output there can be additional problems with GPO applying belomging to DNS confgiruration or slow links between sites. ... Only the password policy an account lockout policy have to bet set on ...
    (microsoft.public.windows.server.active_directory)
  • Re: Applying user object policy (filtering based on computer location)
    ... should have the GPO applied via loopback when logging into ... the computers in NY Desktops OU, ... I have a OU called "NY DESKTOPS" - I created a new policy and enabled Loopback processing mode. ...
    (microsoft.public.win2000.group_policy)
  • RE: GPO settings are not applied
    ... Microsoft Windows XP Operating System Group Policy Result tool v2.0 ... GPO: Automatic_Updates ... GPO: Default Domain Policy ... Secure Proxy Server: N/A ...
    (microsoft.public.windows.server.active_directory)
  • RE: Im falling my hairs with this domain gpo problem
    ... Where is the GPO linked? ... Do Authenticated users and Domain Computers have permissions to "Apply ... I'm having problem with a domain policy. ... only local security policy was showed in the gpresult log (for ...
    (Focus-Microsoft)
  • Re: SBS2K Offline File Question
    ... When I rename one group policy, ... > caching for client computers using GPO. ... > all the policy in this folder is related to the offline files. ...
    (microsoft.public.windows.server.sbs)