none
How do I know GPO settings working? RRS feed

  • Question

  • My company has GPO for windows update, in Group Policy Management, I found a WSUS GPO under 'Group Policy Objects', what puzzles me is that Enforcement = No, then how this GPO working OK?

    In Location - it has Exec (with a blue exclanation mark), a Workstations, and a WSUS Test. they are set with 'Yes' for Link Enabled, path = FQDN\OU\computers\workstation (\workstation\exec, and \wsus test)

    Security Filtering - Authenticated Users. (does this suppose to be Domain Users?)

    Can someone please educate me how this GPO works at all when Enforcement = NO, and Security Filtering is Authenticated users? Thanks.


    Thang Mo

    Monday, February 13, 2012 4:39 PM

Answers

  •  
    > My company has GPO for windows update, in Group Policy Management, I
    > found a WSUS GPO under 'Group Policy Objects', what puzzles me is that
    > Enforcement = No, then how this GPO working OK?
    >
     
    Why should it be enforced? It applies to all accounts (=computers) in
    the OUs it is linked to. Enforcement matters only if you want to be sure
    that a GPO at a higher level in the domain applies to deep nested OUs
    even with inheritance blocked...
     
    > Security Filtering - Authenticated Users. (does this suppose to be
    > Domain Users?)
     
    Auth. Users is every account in your domain and in all domains you
    trust. That includes both users and computers, but NOT groups (groups do
    not authenticate...)
     
    sincerely, Martin
     

    A bissle "Experience", a bissle GMV... Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    • Marked as answer by ThangMo Monday, February 13, 2012 5:39 PM
    Monday, February 13, 2012 5:02 PM

All replies

  •  
    > My company has GPO for windows update, in Group Policy Management, I
    > found a WSUS GPO under 'Group Policy Objects', what puzzles me is that
    > Enforcement = No, then how this GPO working OK?
    >
     
    Why should it be enforced? It applies to all accounts (=computers) in
    the OUs it is linked to. Enforcement matters only if you want to be sure
    that a GPO at a higher level in the domain applies to deep nested OUs
    even with inheritance blocked...
     
    > Security Filtering - Authenticated Users. (does this suppose to be
    > Domain Users?)
     
    Auth. Users is every account in your domain and in all domains you
    trust. That includes both users and computers, but NOT groups (groups do
    not authenticate...)
     
    sincerely, Martin
     

    A bissle "Experience", a bissle GMV... Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    • Marked as answer by ThangMo Monday, February 13, 2012 5:39 PM
    Monday, February 13, 2012 5:02 PM
  • Thanks, Martin. You help me to understand about the Enforcement and Authenticated Users. Great reply, thanks a lot.


    Thang Mo

    Monday, February 13, 2012 5:39 PM