GPO Security Group filtering not working


  • Hello all,

    DC: 2008R2 w SP1

    Client: W7 SP1

    Objective: Disable Removable Storage

    I can filter by individual user but not a security group (global). (linked to both users and computers OU). I check and make sure the user (me) belong to the group using the command whoami /groups. I check the Delegation setting and make sure that the security group has the read and "apply" gpo checked. Also the Authenticated Users group has "read" allow.

    Any clues?


    • Edited by ChuoiSu Tuesday, April 28, 2015 6:37 PM typo
    Tuesday, April 28, 2015 5:37 PM


All replies

  • I restarted my computer and it works. 
    • Marked as answer by ChuoiSu Tuesday, April 28, 2015 6:38 PM
    Tuesday, April 28, 2015 6:38 PM
  • Glad to hear this.

    Best regards,
    Frank Shen

    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact

    Wednesday, April 29, 2015 8:18 AM