[prev in list] [next in list] [prev in thread] [next in thread] 

List:       samba
Subject:    Re: [Samba] GPO Filter Group/User
From:       "Carlos A. P. Cunha via samba" <samba () lists ! samba ! org>
Date:       2017-05-31 21:28:19
Message-ID: b948d665-6e38-87d8-bbe8-6d0f2c096910 () gmail ! com
[Download RAW message or body]

Hello!

Thanks.

I'm trying but still unsuccessful .....

Regards


Em 30-05-2017 16:25, Miguel Medalha escreveu:
> 
> > My problem is, create a GPO with group Filtering, in case I want the 
> > GPO to be applied only to a specific group.
> > When I do this (Filter) it does not load the GPO, only when I leave 
> > the default (Authenticated User).
> > Is there something wrong with Samba or something different?
> 
> For a GPO to work, Authenticated Users must have "Read" permission. 
> Please note that in order for the policy to be applied to a specific 
> group, that group must have "Read" and "Apply group policy" 
> permissions. So, giving "Read" permission to Authenticated Users does 
> NOT apply the policy to all Authenticated Users.
> 
> Please have a look at the following:
> 
> Windows update changes Group Policy Security Filtering (MS16-072)
> http://www.mistercloudtech.com/2016/06/22/june-14th-windows-update-changes-group-policy-security-filtering/ \
>  
> 
> What needs to be verified in order for a policy object to work is the 
> following:
> 
> Under the "Delegation" tab, click the "Advanced" button. A "Security 
> Settings" box opens. Verify that "Authenticated Users" has "Read" 
> permission. "Apply group policy" permission is NOT needed unless you 
> specifically need it for your purposes. Alternatively, as per the 
> Microsoft documents, give "Domain Computers" (or specific domain 
> computers) at least "Read" permission.
> 
> The relevant Microsoft documents are here:
> 
> MS16-072: Security update for Group Policy: June 14, 2016
> https://support.microsoft.com/en-gb/kb/3159398
> 
> The following page explains the issues and the corrective measures
> https://support.microsoft.com/en-gb/kb/3163622
> 
> 
> 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[prev in list] [next in list] [prev in thread] [next in thread]