1

Howdy,

I have a computer policy assigned to our OU that has all our laptops in it. For testing, I have gone into the Delegation on this GPO and turned off the “Apply group policy” checkbox under Authenticated users and then manually added in 3 users (including myself) to be used in testing this GPO. For those 3 users, they have the “Read” and “Apply group policy” boxes checked.

However, when I do a GPUpdate /force, the settings don’t apply. When I do a gpresult /r /scope computer, it shows this specific Policy as being filtered out and says “Denied (Security)”.

Is there any way to figure out exactly what it doesn’t like? Since it shows up in GPResult I know it’s seeing the policy but it’s choosing to not apply it for some reason.

I think I’ve seen this before and if I let it sit for a while, eventually it might just start working, but I’d like to figure out why it’s not working now if possible.

Thanks!

2 Spice ups
2

From my understanding, Computer policies apply to computers. Who logs in does not matter. Add the computer objects to the filter and it should start working, that is if I remember GPO rules enough.

3

That’s what I was wondering. Do I need to specify 3 computers as a test instead of the three users. I guess I’ll try that.

4

Mike0831 is correct you need to specify the machines not the users.

On a completely different note, didn’t expect any Forgotten Relams gods to be looking for group policy answers :stuck_out_tongue:

5

Glad it worked. I have done that myself too many times. Then the next words are “ooohhh yeah, I remember”.