I am working in a test lab. I have 2 users, test1 and test2. I also have group1 and group2. None of the users or group are in any of the admin groups.
On 2/23/06, Darren Mar-Elia <[EMAIL PROTECTED]> wrote: > Ok. So I am assuming from your description that you are trying to filter > user policy by user group. The question here is, are you logging into > the workstation with a user account that is a member of the admin groups > that have deny access? If so, then the deny will override any grant. > > Darren > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Joe Lagreca > Sent: Thursday, February 23, 2006 12:55 PM > To: ActiveDir@mail.activedir.org > Subject: Re: [ActiveDir] GPO Security Filtering to a group not working > > Authenticated users was removed from the GPO. > > I have deny "apply group policy" only for all the admin groups, so I > don't accidentally appy the GPO to any of them. > > The group I am trying to apply the GPO to, is not part of any other > group. > > Joe > > On 2/23/06, Darren Mar-Elia <[EMAIL PROTECTED]> wrote: > > Joe- > > Are you removing the Authenticated Users ACE before you add the > > discretionary group? You don't have any Deny ACEs on that GPO, do you? > > > > Darren > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Joe Lagreca > > Sent: Thursday, February 23, 2006 10:08 AM > > To: ActiveDir@mail.activedir.org > > Subject: [ActiveDir] GPO Security Filtering to a group not working > > > > I am trying to implement GPO Security Filtering to groups without any > > luck. > > > > When I run gpresult on the workstation, I get "Filtering: Denied > > (Security)". > > > > However I have delegation, I have given the group both read and apply > > policy permissions. > > > > When I try GPO Security Filtering for either a single user, or the > > built in authenticated users group, it works fine. I just can't seem > > to get it to work with the group I have created. > > > > Has anyone experienced this before or know what I am doing wrong? I > > have tried it with both domain local and global security groups. > > Thanks. > > > > Joe > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: > > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: > > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
