+ Post New Thread
Results 1 to 5 of 5
Windows 7 Thread, Security group / GPO problem Svr 2012 / Win 7 in Technical; Hi everyone. I was on here before (Number6) but haven't posted for a while. Now I can't get into my ...
  1. #1

    Join Date
    Jan 2014
    Posts
    17
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Security group / GPO problem Svr 2012 / Win 7

    Hi everyone.

    I was on here before (Number6) but haven't posted for a while. Now I can't get into my old account so hence this new one.

    Anyway,

    I have a problem that's been bugging me most of the day.

    I have a brand new 2012 DC on which I've created a folder redirection GPO pointing users docs and desktop to a newly created share. I have created a new global security group for folder redirection users, the group currently contains only me. The GPO scopes to the folder and is applied to the OU containing the user.

    Now, on a W7 PC logged in as me I have run gpudate /force followed by gpresult. This shows the new policy not applied (Denied: Security). It does not show me as a member of the folder redirection group. Obviously the GPO is denied because I'm not showing as a member of the relevant security group.

    The same result ensues if I run gpresult on the DC.

    whoami /groups does not show me in the group also.

    Simple question. Why am I not showing as a group member?

    This is completely "doing my head in" and I need to resolve it yesterday, any ideas anyone?

  2. #2
    MordyT's Avatar
    Join Date
    Sep 2012
    Location
    In a computer
    Posts
    433
    Thank Post
    43
    Thanked 69 Times in 64 Posts
    Rep Power
    19
    I am going to bet uac. Has to do with the standard token vs elevated token.

  3. #3
    free780's Avatar
    Join Date
    Sep 2012
    Posts
    920
    Thank Post
    41
    Thanked 69 Times in 66 Posts
    Rep Power
    18
    For user docs provided its the home drive the user needs to be the owner of the folder.

  4. #4

    Join Date
    Jan 2009
    Location
    Northants
    Posts
    136
    Thank Post
    3
    Thanked 11 Times in 10 Posts
    Rep Power
    13
    Stupid question but have you logged off and back on? Windows only processes your group membership at logon time, and if you created the group and added yourself since then it will not recognise.

  5. #5

    Join Date
    Jan 2014
    Posts
    17
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Yes, I had tried logging off and on several times both on the DC and the workstation.

    However, the next morning it was OK. No idea why but it just seemed to take ages to propogate.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 2
    Last Post: 27th January 2011, 12:06 PM
  2. WSUS gpo problem
    By z4ydi in forum Network and Classroom Management
    Replies: 7
    Last Post: 11th February 2008, 03:12 PM
  3. Global Security Groups - Server 2003
    By steve in forum Windows
    Replies: 4
    Last Post: 8th November 2007, 06:14 PM
  4. Security Groups in 2003
    By SpuffMonkey in forum Windows
    Replies: 1
    Last Post: 19th July 2006, 11:18 PM
  5. Disable network logon for a Security Group or an OU
    By mrforgetful in forum Wireless Networks
    Replies: 10
    Last Post: 28th June 2006, 04:13 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •