[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 576
  • Last Modified:

gpo filters

can anyone tell me how to edit/remove GPO filtering on a windows 2003 server that is part of an a/d? Step by step please.
2 Solutions
yo_beeDirector of ITCommented:
Do you know what is being filtered or is this  unknown info?

There are multiple ways to address this:
1: Scope
2: WMI Filtering
3: Advance security rights to the GPO

I will post some screenshots of all three of these
yo_beeDirector of ITCommented:
Here are the screenshots
SCOPE Filtering.
You add groups that can read this GPO. By default Authenticated Users have rights to read the objects.  If you are looking to just have a certain group read the object this would be where I would start.

Next is WMI Filtering.
This is a pretty nice way to target certain Computers via the NETBIOS name. For example all your Laptops name start with LT and all your Desktop start with DT. You can target LT% and the Computer GPO setting will only apply to computers that start with LT% and ignore all other computer names.

Another way is Delegation. You can add and remove Users and Groups from this area to control who ask rights to read only, Read/Write and other options.  There also is the Advance function that is just like NTFS ACL.  You can Deny or Allow more granular control.

DelegationDelegation AdvancedAdvance Settings
Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Mike KlineCommented:
It really depends how the box is being filtered.  Is it part of a group and that group is being used for filtering.  If that is the case then you would remove the object from the group.  

If the box is in the ACL then you would remove the object from the ACL.

Some screenshots of security filtering   http://adisfun.blogspot.com/2009/04/security-filtering-and-group-policy.html


yo_beeDirector of ITCommented:
Why only a B rating?  :(
lcipolloneAuthor Commented:
sorry my mistake i hit the wrong button> how can i change it?
yo_beeDirector of ITCommented:
No biggie.  I was just curious the reason why.

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now