Solved

Group Policy security settings..

Posted on 2009-07-10
4
203 Views
Last Modified: 2012-05-07
Ok after running gpresult on one of my terminal servers I noticed that the terminal server GPO wasnt being applied due to Security as in "Filtering: Denied (Security)".

So Im looking and that specific GPO is Linked to the Terminal Server OU (which contains all three TS servers, and it is Filtered to Authenticated Users and Terminal Server Computers and both of those have read and apply rights.

So do I evern need the Terminal Server Computers group listed under Filtering since the GPO is only linked to the Terminal Server OU?  Could that be whats causing this security failure?
0
Comment
Question by:Ben Hart
  • 2
  • 2
4 Comments
 
LVL 14

Accepted Solution

by:
amichaell earned 250 total points
ID: 24827309
So long as the GPO is only linked to the Terminal Server OU you can just filter on Authenticated Users, which is all authenticated users and computers.  
0
 
LVL 14

Author Comment

by:Ben Hart
ID: 24827370
Sweet.. So I removed the terminal Server Computers from the filtering list and tonight when they all reboot I'll re-run gpresult and hopefully get better results.  
0
 
LVL 14

Expert Comment

by:amichaell
ID: 24827390
Great.  Let me know.  
0
 
LVL 14

Author Comment

by:Ben Hart
ID: 24843124
Seems to have worked, gpresult now shows teh computer portion of that GPO as being applied.  thanks so much.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Joining two Windows domain into one subnet. 10 45
Move (NOT migrate) from SBS 2008 to Server 2016 (no Exchange) 8 117
edit user account 1 31
GPO help required 12 42
[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
Synchronize a new Active Directory domain with an existing Office 365 tenant
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now