Q

Why did a group policy run on a group for which it was denied?

I created a group policy that will in effect block Internet access by setting erroneous proxy server settings. I set up an "Internet Users" group and denied the Apply Group Policy right for this group. However, the policy ran once for everyone, including the users in the "Internet Users" group.
I've not seen that one personally, but you may want to try and force a security policy refresh:

 secedit /refreshpolicy machine_policy /enforce


This was first published in July 2004

Dig deeper on Microsoft Active Directory Migration

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchServerVirtualization

SearchCloudComputing

SearchExchange

SearchSQLServer

SearchWinIT

SearchEnterpriseDesktop

SearchVirtualDesktop

Close