Answered by:
GPO for Secuirty Group to Restrict PST import and Export

-
Hi ,
I have multiple OU’s every OU contains few users. We are migrated our exchange, Now what be want user from Any OU, Who have been migrated to new exchange can’t Import, Export or create PST. For That i have created a Group policy, Now i created one security group, Add that group into Group policy’s delegated assign read & apply group policy permission. Later add few users in that group from different-different OU’s , User are still able to import & export the PST. note : same policy is working fine on OU but not on security group.
Please let me know which step i am missing.Thanks in advance
Question
Answers
-
Okay. what is the policy setting your trying ? give the exact setting.
what GPresult says ? is policy getting applied (and not working).!
Devaraj G | Technical solution architect
- Proposed as answer by AlvwanMicrosoft contingent staff, Moderator Wednesday, May 11, 2016 8:41 AM
- Marked as answer by AlvwanMicrosoft contingent staff, Moderator Monday, May 16, 2016 9:35 AM
All replies
-
Hi,
Thanks for your post.
Based on my experience, GPO can only be linked to Site, Domain and OU. In addition, GPO will not applied to the Group objects by design. It only can be applied to User and Computer objects.
To apply the Group Policy on the User and Computer objects based on Security Groups, you will need to use Security Filtering.
For more information, please also read the following Microsoft TechNet article:
Security filtering using GPMC
http://technet.microsoft.com/en-us/library/cc781988(v=WS.10).aspx
Here is a blog that explains how you apply a GPO using a security group:
How to apply a Group Policy Object to individual users or computer
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Best Regards,
Alvin Wang
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
-
-
I have Configured Security filtering & i followed the same link but i added a group instead of user or computer
-
Okay. what is the policy setting your trying ? give the exact setting.
what GPresult says ? is policy getting applied (and not working).!
Devaraj G | Technical solution architect
- Proposed as answer by AlvwanMicrosoft contingent staff, Moderator Wednesday, May 11, 2016 8:41 AM
- Marked as answer by AlvwanMicrosoft contingent staff, Moderator Monday, May 16, 2016 9:35 AM