Software

Hi, i am having trouble using security filtering (sf) on a group.

Security Group Details:
name: Domain\Group1
members: me

I have create a GPO with User Configurations only.
Within the GPO, i have added Group1 to sf and applied the 'Read' and 'Apply Group Policy' permissions. I have also left IN the 'Authenticated Users' however unchecked the 'Apply Group Policy' permissions (as mentioned as a best practice from grouppolicy.biz)

My user object is in a child OU of the GPO.

When i run a gpresult i see that the GP is denied "Access Denied (Security Filtering)"

If instead of adding the group to sf i add my user account directly to sf, the policy applies correctly.

Can you please help me troubleshoot why the policy is not applied to group members, but IS applied if the user is added directly to sf?