1 reply
by d.walker5
This behavior can result form many causes:
1. Double check that the GPO is linked to the OU.
2. Make sure that the intended policy if not being blocked. Make sure no policy set at a higher level of AD has been set to No Override. If Block Policy Inheritance and No Override are both used, the no Override takes precedence. Be sure that the user or computer is not a member of any security group for which the AGP permission is set to Deny. Verify that the user or computer is a member of at leastone group for which the AGP permission is set to Allow. Verify the that user or computer is a member of at least one security group for which the Read permission is set to Allow.
3. Make sure the GPO link is to an OU that is a parent to AD cantainer. Then, by default, your settings are applied to the users and computers in the cantainer throught inheritance.
I hope one of these solutions solves your problem, if not let me know.
This discussion is closed to new replies.
Trending Windows Forum posts
Sort by Trending