Solved

GPO Settings

Posted on 2011-02-16
4
851 Views
Last Modified: 2012-05-11
Hi,
On an SBS 2008 I ran the RSOP wizard and discovered that none of the Users Settings from a GPO are being applied. The reason given is Access Denied (Security Filtering). I checked that the Security Filtering was correctly set, and it was. Links to the GPOs are enabled, and the GPOs themselves are enabled. I set this particular GPO to "Enforced", yet it still does not get applied. The GPO which I was investigating when I discovered this situation is applied to a User group containing all of the users on our network. All of the Computer settings appear to be getting applied as intended.
Where do I go from here?
Thanks for any help, Bill
0
Comment
Question by:westone
4 Comments
 
LVL 3

Accepted Solution

by:
Richard2k4 earned 500 total points
ID: 34909545
the user group that you added to the permissions list.  Is it set to Read AND apply?

A deny ALWAYS over rules  an allow.  Are there any groups that you denied that those members might be a member of as well?
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 34909563
>>"is applied to a User group containing all of the users on our network"
Group? Is it linked to the OU containing a the users? Just a clarification of terms.

Try running GPResult on a PC with one of the user accounts and see if that provides more information.
If you made changes the updated policy will not be applied to a workstation for about 90 minutes or run gpupdate /force and log off and on.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 34909618
Just to add.

Seems like permissions issue on GPO.

http://technet.microsoft.com/en-us/library/cc759506(WS.10).aspx
0
 

Author Closing Comment

by:westone
ID: 34909687
It was set to just Read. Thanks!
0

Featured Post

Do email signature updates give you a headache?

Do you feel like all of your time is spent managing email signatures? Too busy to visit every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

Join & Write a Comment

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now