Link to home
Start Free TrialLog in
Avatar of Andre P
Andre PFlag for Canada

asked on

Help ! Gpo being denied Inaccessible, Empty or Disabled I cant figure out why ?

Environment - Windows Server 2012 r2
target ; Windows 10 professional

I am basically trying to launch a bat file .
The Gpo is being denied .. I am attaching screenshots of the configuration .
I am hoping another set of eyes can help me figure this out
Screen-Shot-2017-02-25-at-10.40.02-P.png
Screen-Shot-2017-02-25-at-10.41.48-P.png
Screen-Shot-2017-02-25-at-10.42.21-P.png
Screen-Shot-2017-02-25-at-10.50.34-P.png
Avatar of Cliff Galiher
Cliff Galiher
Flag of United States of America image

Security filtering is biting you. User policies are still downloaded by the computer using the computer account. When you remove the "authenticated users" group from the security section on a group policy and add a security group with user objects, the computer account is effectively blocked. You just add the computer accounts, groups with computer accounts as members, or delegate permissions.

You can add the win10 computer you are testing on as a member to your existing group just to see what I say is true
Avatar of Andre P

ASKER

I am not sure I understand.. the wind10 ISNA member of the security group its the only member
or are you suggesting I add the authenticatied  user group
ASKER CERTIFIED SOLUTION
Avatar of Cliff Galiher
Cliff Galiher
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Andre P

ASKER

Cliff, Did what you said , See attached .. Same result

The user is in Test user
The computer is in Test computers
Screen-Shot-2017-02-26-at-11.06.49-A.png
Screen-Shot-2017-02-26-at-11.07.49-A.png
Screen-Shot-2017-02-26-at-11.08.09-A.png
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Andre P

ASKER

Cliff , I am studying on group policies thats why i am trying this in a lab before using it in production .
I think i got it working after a windows update
https://support.microsoft.com/en-us/help/2976965/-inaccessible,-empty-or-disabled-message-in-group-policy-results-report-for-a-remote-computer-in-windows-server-2012-r2
Still I appreciate your help , it clarified some things for me .