I have noticed that some GPOs in use here are Security Filtered to certain
AD groups, and Authenticated Users has been removed from the default
Security Filter. This is all very normal and good.
However, switching to the Delegation tab of the GPO, I see Authenticated
Users listed with Read
You are correct, somehow the Authenticated Users was added to the
Delegation tab, unless it was inherited, but I doubt that. Does it say No
under the inherited column?
Not sure what you mean by this:
And does this mean that the groups defined in the Security Filtering
section will
It definitely wasn't inherited. One thing I have noticed though if you add
the Authenticated Users group through the Security Filtering function you
get *Read* *and* *Apply GPO* permissions. If you add it through the
Delegation tab you can only apply Read permissions unless you go through
the
No, Authenticated Users will not be running the GPO. You have to have the
Apply Group Policy right in order for it to apply. Either by adding it
manually through the Advanced button on the Delegation tab, or by using
the security filtering tab, which does it for you, Having only read does
not
Thanks, I now have a full understanding of what's going on. Looks like I
will have to dig elsewhere to find the cause of the massive logon hangs.
Cheers,
JR
On 14 November 2012 13:46, Christopher Bodnar
christopher_bod...@glic.comwrote:
No, Authenticated Users will not be running the GPO.
If you really want to see if it's being applied just go to a client
machine and do a GPRESULT from a command prompt. It will give you all the
applied GPOs.
Christopher Bodnar
Enterprise Architect I, Corporate Office of Technology:Enterprise
Architecture and Engineering Services
Tel
.Just tossing out a random thought having had this issue before. Do you have
any machine or user logon scripts running? I had one hang a few years ago
trying to find a share on a server that was removed...it created a massive
delay for the users it was applied to.
From: James Rankin
There's all sorts in the mix here, including logon scripts. I'm digging
through the whole lot now
On 14 November 2012 14:01, Kennedy, Jim kennedy...@elyriaschools.orgwrote:
.Just tossing out a random thought having had this issue before. Do you
have any machine or user logon scripts running?
Well you were on the right track Jim - there is a quite long logon script
in use here, but it was also accompanied by the Group Policy setting of *Run
logon scripts synchronously *being set to *Enabled. *Disabling this setting
shaves two minutes off the logon time instantly.
Thanks for your help
I was thinking I at least need to make sure to change where the old PDCe gets
it's time source from once you transfer roles, or does it know to change as
part of the FSMO role move? Transferring roles, I just use the MMC and move and
everything else will take care of itself yes?
From: Ken
Might check this out. We had similar issues because the computers didn't have a
DHCP lease when the drives were mapped so the mapping failed.
http://support.microsoft.com/kb/2459530
From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
Sent: Wednesday, November 14, 2012 7:33 AM
To: NT
Looks very promising, but these are 32 bit Win7 boxes. That is only a 64 bit
fix but I will certainly give the reg entries a try.
From: Crawford, Scott [mailto:crawfo...@evangel.edu]
Sent: Wednesday, November 14, 2012 1:01 PM
To: NT System Admin Issues
Subject: RE: Win 7 wireless mapped drives
That KB applies to i386/64/ia64 versions of Windows 7/Server 2008.
The hotfix can be downloaded for each of those versions.
On Wed, Nov 14, 2012 at 1:27 PM, Kennedy, Jim
kennedy...@elyriaschools.orgwrote:
Looks very promising, but these are 32 bit Win7 boxes. That is only a 64
bit fix but I
*touches nose and points*
On Wed, Nov 14, 2012 at 1:36 PM, Kennedy, Jim
kennedy...@elyriaschools.orgwrote:
Only if you click on ‘Show hotfixes for all platforms and languages’. ;)
** **
*From:* Jonathan Link [mailto:jonathan.l...@gmail.com]
*Sent:* Wednesday, November 14, 2012
14 matches
Mail list logo
