locked
Computer Security Group Membership Changes Not Updating RRS feed

  • Question

  • I am trying to create GPOs that can be applied to computers that cannot be grouped into unique OUs, so I'm using security group filtering instead of trying to move them all into the same OUs.  

    I created several new global security groups, then created GPOs that were set to be applied only to members of these groups.

    The GPOs were not working so I did gpupdate /force and gpresult /r and saw that the results were showing that these computers do not belong to these security groups.

    I went to the security group and looked at the members and I see the computers there.  If I go to the computer account in AD and look at Member Of, I see the membership there.  However, if I go to the physical computer and run gpresult /r, the membership is not reflected locally even after a gpupdate.  The computers are all on the local LAN with communication to the DCs.

    What can cause these issues?

    Friday, August 17, 2012 5:49 PM

Answers