questa condizione
If a GPO is incorrectly denied or applied due to security filtering because the user or computer had different security group memberships
than expected, use Active Directory Users and Computers to check and, if necessary change, the security group memberships.
è verificata ?
inoltre presta attenzione che se vuoi filtrare effettivamente gli utenti, ti devi trovare in questa situazione
When restricting the application of a GPO, be sure to remove Authenticated Users. Otherwise all users will always be affected by the GPO.
Computers are members of the Authenticated Users group. If you remove Authenticated Users from the list on the Scope tab and you want the GPO to apply to a computer,
you must specifically ensure that the computer belongs to a group that is included in the Security Filtering section on the Scope tab.
Edoardo Benussi
Microsoft MVP - Directory Services
edo[at]mvps[dot]org
