General discussion
Thread display: Collapse - |
All Comments
Start or search
Create a new discussion
If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.
Domain-local group member removal
Members of the group have Deny permissions to the policy. When I remove them, the policy should be applied, and the service pack should install. This has worked in the past.
However, the install is not occurring. GPRESULT.exe run on the workstation shows that it still believes itself to be a member of the Deny group.
I have verified that the machine accounts have been removed from the Deny group on both DC's, and have rebooted DC's and workstations multiple times.
Question: Why does the workstation still think it is in this group...where is it pulling this membership information from? How can I kick it out?