fiza Posted November 30, 2017 Posted November 30, 2017 I have downloaded the Chrome ADMX templates and set up a policy with a few user settings in it. I have attached it to a GP OU with users only in it. The policy does not apply and on checking Group Policy Results I see that it gets denied as "Inaccessible". I have checked the permissions and the test user has the right permissions and is listed in the Security of the policy. In GP Results the Denied GPO shows only its GUID, not its name (see screenshot). Any ideas what is going on?
Steve21 Posted November 30, 2017 Posted November 30, 2017 When you say the test user did you filter it to that user? if so did you remember to put authenticated users back in the delegated part for reading it? Steve
fiza Posted November 30, 2017 Author Posted November 30, 2017 When you say the test user did you filter it to that user? if so did you remember to put authenticated users back in the delegated part for reading it? Steve I did filter it to just that user but I didnt know I had to put authenticated users back into the delegated part for reading it. I have never done that before and other policies work fine. I will try adding authenticated users back in to the delegated tab and see what happens.
Steve21 Posted November 30, 2017 Posted November 30, 2017 You never had to before, but last year a patch for security "fixed" it At least for 2012+ but guessing they probably added it back to 08 too So now if you don't re-add auth users when you take it out the computers can't read it properly and throw a wobble. Steve
fiza Posted November 30, 2017 Author Posted November 30, 2017 You never had to before, but last year a patch for security "fixed" it At least for 2012+ but guessing they probably added it back to 08 too So now if you don't re-add auth users when you take it out the computers can't read it properly and throw a wobble. Steve Thanks Steve. That worked. I did read the KB about the patch but as it applied to 2012+ I didn't pay too much attention to it.
Steve21 Posted November 30, 2017 Posted November 30, 2017 MS logic seems to be patch stuff even though it's "unsupported" but don't update notes! haha At least it's sorted Steve
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now