none
user GPO won't apply and file security not working (urgent)

    Question

  • helle i'm trying to apply gpo to user groups or users but there not appling any of the user restrictions

    it is only happening with this OU

    here are some pictures:

    may i also add that as i was told in this topic:

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/f13f22a4-e19b-4207-92b2-adab69fae592/computers-and-users-on-seperate-gpo?forum=winserverGP

    the computers are on sperate GPOs to the users as can be seen in this image:

    i've tried appling to the group and to the user by it's self with no luck

    the computer GPOs work fine as far as i'm concerned...

    i'm doing my tests on a computer that is a member of pc-client OU but the users will be logging into the computer that is a member of the OU mdl-pc (i don't have access to hat pc at the moment)

    another problem is that my file security in't being applied for any of the groups that are linked to this OU

    here are photos of the file properties:

    123

    123

    any help would be great many thanks

    this is kind of urgent

    Thursday, July 21, 2016 7:23 PM

Answers

All replies

  • > helle i'm trying to apply gpo to user groups or users but there not
    > appling any of the user restrictions
     
    Welcome to MS16-072...
     
    • Marked as answer by glennmckenna Friday, July 22, 2016 2:52 PM
    Friday, July 22, 2016 8:18 AM
  • Hi,

    First, I notice that you have configured the security filtering with CA group. This means that only those members of the CA group will apply the policy.

    Second, did you configure the loopback mode on those computer?

    In addition, here are articles below about MS16-072 for your reference.

    MS16-072: Security update for Group Policy: June 14, 2016

    https://support.microsoft.com/en-us/kb/3163622

    MS16-072 – Known Issue – Use PowerShell to Check GPOs

    https://blogs.technet.microsoft.com/poshchap/2016/06/16/ms16-072-known-issue-use-powershell-to-check-gpos/

    Best Regards,

    Jay


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by glennmckenna Friday, July 22, 2016 2:52 PM
    Friday, July 22, 2016 8:58 AM
    Moderator
  • many thanks i've got the restrictions repared 

    is it a good idea to activate LDAP ?

    but i've still got problems with my shared files, should i create another topic for that ?
    the problem with the shared files is that the securities don't work and not all of the drives are mapped in my computer the is only 7 out of the 10 mapped

    Friday, July 22, 2016 2:52 PM