1

I have a GPO where Authenticated users are set to read and not apply

When I add a user to the scope, the gpo applies to that user no issue

When I add a security group with that user in it to the gpo, it doesn’t apply at all.

Checked permissions, there is no deny

7 Spice ups
2

GPOs apply to OUs, not groups or users.

How are you trying to apply this to a security group?

3

With everything that you have set. Log in as the user. Launch cmd and type gpresult /r. See if you group policy object is even being applied.

In regards to DragonsRules reply hes correct. Are you using item level targeting to target your security group?

4

What is that GPO that you are trying to apply it to users?

5

Please post the screenshot, something you are doing is not tight, that’s my gut feeling.

6

Whenever I apply security filtering to an individual:
Untitled.png

Untitled.png

Whenever I apply security filtering to a group that the user is in:

Untitled.png

7

Trying linking the GPO to your domain like test.local for example.

Then just add the group to the security filtering

Then run a gpupdate /force followed by a gpresult /r and see if its still being denied.

8

You may want to have a look at this, about security filtering with GPOs. Make sure you have the correct setting in the Delegation tab.

9

It is linked to the domain.

10

Authenticated users has read access, but not apply.

It applies with no issues when applying security filtering to an individual, but get denied when applied to a group that the individual is in.

Domain Computers also has read access

11

Hmmm… okay, that should work then. Something else is filtering it out, not this particular setting.

12

The security group I’m attempting to apply it to is brand new, created just for this purpose, I’ve tried other security groups as well with the same results. The only time it applies, is when I use security filtering per user, doesn’t work on groups.

I have a previously created gpo that is applying to security groups with security filtering with no issues, and as far as I can tell, there is no difference between the two.