Re: GP being filtered?


"Florian Frommherz [MVP]" <florian@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:uoICBeBkIHA.1744@xxxxxxxxxxxxxxxxxxxxxxx
Howdie!

Linn Kubler schrieb:
CitrixPS4 lockdown
Filtering: Denied (Security)

As you can tell from the policy name that it is intended to be applied to
my Citrix servers so I have it linked to an OU that contains my Citrix
servers and the Security Filtering is applied to my AD group of Citrix
Users.

Since you're linking the policy to an OU full of machines and configure
CComputer Configuration settings, why would you only allow user accounts
access to the policy? The Citrix servers need to be able to read and apply
the policy. They need "Read" and "Apply Group Policy" permissions.

cheers,

Florian
--
Hi Florian,

I thought linking the policy to the OU was giving the servers those rights.
What do I need to change then? How do I give the servers "Read" and "Apply
Group Policy" permissions?

Thanks much,
Linn


.

Relevant Pages

  • Re: Preventing users from c onnecting to shares NOT on the domain..
    ... First condition would be to set "Require Security" policy to "Restricted ... These computers could be excluded by IP address, ... > The servers might be located on the same subnet of some of the clients. ...
    (microsoft.public.win2000.networking)
  • Re: Preventing users from c onnecting to shares NOT on the domain..
    ... First condition would be to set "Require Security" policy to "Restricted ... These computers could be excluded by IP address, ... > The servers might be located on the same subnet of some of the clients. ...
    (microsoft.public.win2000.security)
  • Re: Please help GPOs - MVPs
    ... > Network is Win2000 advanced servers. ... > default domain security policy but these setting are not showing on the ... > member servers when I look at the local policy and look at the effective ... Local policies for "Security Account Policies" ...
    (microsoft.public.win2000.active_directory)
  • RE: GPO and Terminal Services
    ... Apply the policy to the OU containing the MetaFrame ... Servers, and enable loopback policy processing (a setting in the Group ... > Citrix servers are configured in a load balance farm. ...
    (microsoft.public.windows.terminal_services)
  • Re: GP being filtered?
    ... my Citrix servers so I have it linked to an OU that contains my Citrix servers and the Security Filtering is applied to my AD group of Citrix Users. ... Since you're linking the policy to an OU full of machines and configure CComputer Configuration settings, why would you only allow user accounts access to the policy? ...
    (microsoft.public.windows.group_policy)