Re: Authenticated Users vs. Individual Users - Scope problem
- From: "Florian Frommherz [MVP]" <florian@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Wed, 05 Dec 2007 12:50:18 +0100
Howdie!
jlinhrst schrieb:
When I remove 'Authenticated Users' from the scope of a GPO and add either individual users or a group, the GPO will not apply. 'gpresult' shows an error related to the policy: 'Filtering: Not Applied(Unknown Reason).' The individual users and the group are a part of 'Authenticated Users,' so I would think that removing 'Authenticated Users' then adding the user or group to the GPO specifically would enable the GPO to apply to that user or group. I am using gpmc to deploy and manage my GPOs. Any thoughts?
What policy are we talking about?
Two things esentially need to be present: the users and computers need to be in the OU you linked the policy to and the users/computers need at least "Read" and "Apply" Group Policy rights.
If you replaced the "Authenticated Users" group with some other security groups, be sure people who shall apply the policy are member of it. If it's a Computer Configuration policy, be sure to add the Domain computers group there.
cheers,
Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
.
- Prev by Date: Re: Handing out a Proxy
- Next by Date: Applying User Settings to a Computer Object
- Previous by thread: Handing out a Proxy
- Next by thread: Re: Authenticated Users vs. Individual Users - Scope problem
- Index(es):
Relevant Pages
|