Solved

GPO's without Links but Still Filtered to Authenticated Users

Posted on 2006-06-26
2
345 Views
Last Modified: 2010-04-18
OK I think this is a simple one.

Just started a new job and am managing 3 servers.  Am documenting all the GPO's so I know what is supposed to be happening on the servers and its clients.

I noticed several GPO's that are not linked to any OUs, but under the Security Filtering Section they are set to be applied to the "Authenticated Users" group.  I ran RSOP on my client while logged on as administrator, and don't see that any of these non-linked GPOs are being applied.  Is that normal?

Is there any reason to have GPO's that have no active links but are filtered to authenticated users?  Should these GPO's be being applied to all authenticated users?  The GPOs contain both Computer and User settings.  I'm just trying to figure out why the previous Administrator set these up.

ckangas7
0
Comment
Question by:ckangas7
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 51

Accepted Solution

by:
Netman66 earned 125 total points
ID: 16988511
Yes, that's normal.  

GPMC is kind of misleading.  The "filtering" you see siimply means that the Authenticated Users group will get the policy if it was linked.

It's very possible the last Admin simply unlinked them if they didn't do what he wanted.  You should be safely able to delete these.

0
 

Author Comment

by:ckangas7
ID: 17002425
Yep, that's what I thought, but just wanted to make sure before I started deleting things.  Thanks.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question