Group Policy - Access denied Security Filtering

Posted on 2009-04-29
Last Modified: 2013-11-21

I am trying to setup a group policy to hide the c and d drives of our citrix servers for users.  

I created an OU called citrix servers and moved the citrix servers into it.  

I then created a group policy and enabled "user group policy loopback processing mode" (tried both merge and replace) and "hide these specified drives in my computer."

I linked the group policy to the citrix servers OU

I added a user account on the scope tab under security filtering and I can see the user has Read when looking at the delegation tab

The GPO status is disabled

When I run Group Policy Results and pick that user and one of the citrix servers, that policy doesn't show up in Applied or Denied.  But when I tried to use Group Policy Modeling, I saw that Hide Citrix Drives policy in the Denied Poicy listing.  The reason as Access Denied (Group Policy Filtering)

I do not know what I am missing here but have spent hours on this.  Any ideas?


Question by:Bonnie_K
    LVL 7

    Accepted Solution

    your citrix server must apply the gpo: put it in the filtering as well.

    Author Comment

    I added the citrix servers to the list on the scope tab under security filtering, but that did not seem to help.

    I noticed in Group Policy Results, that the GPO is listed, but by its unique identifier and not its name.  The reason it is denied when looking at the Group Policy Results is "inaccessable"

    Author Comment

    It did work, I think I needed to wait a minute for changes to propagate
    LVL 12

    Expert Comment

    by:Daniel Borger
    The GPO should be enabled, when you gave the user read did you also check to apply the group policy to the user? Also, there is a program out ther called HIDECALC that will help if you would like to hide other drive letters as well. it creates a .adm.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found listed in my profile here: http:…
    New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
    This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now