Solved

Group Policy security settings..

Posted on 2009-07-10
4
216 Views
Last Modified: 2012-05-07
Ok after running gpresult on one of my terminal servers I noticed that the terminal server GPO wasnt being applied due to Security as in "Filtering: Denied (Security)".

So Im looking and that specific GPO is Linked to the Terminal Server OU (which contains all three TS servers, and it is Filtered to Authenticated Users and Terminal Server Computers and both of those have read and apply rights.

So do I evern need the Terminal Server Computers group listed under Filtering since the GPO is only linked to the Terminal Server OU?  Could that be whats causing this security failure?
0
Comment
Question by:Ben Hart
  • 2
  • 2
4 Comments
 
LVL 14

Accepted Solution

by:
amichaell earned 250 total points
ID: 24827309
So long as the GPO is only linked to the Terminal Server OU you can just filter on Authenticated Users, which is all authenticated users and computers.  
0
 
LVL 14

Author Comment

by:Ben Hart
ID: 24827370
Sweet.. So I removed the terminal Server Computers from the filtering list and tonight when they all reboot I'll re-run gpresult and hopefully get better results.  
0
 
LVL 14

Expert Comment

by:amichaell
ID: 24827390
Great.  Let me know.  
0
 
LVL 14

Author Comment

by:Ben Hart
ID: 24843124
Seems to have worked, gpresult now shows teh computer portion of that GPO as being applied.  thanks so much.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Computer account cleanup 90 128
Active Directory/sub domain vs root domain 3 29
Poll Active Directory user information 11 42
gpo help required 4 28
[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question