Results 1 to 4 of 4

Thread: Group Policy Filtering: Denied (Security)

  1. #1
    Join Date
    Nov 2005
    Posts
    38

    Group Policy Filtering: Denied (Security)

    At our workplace we are running a Windows 2003 standard edition with Terminal service. Recently I created an OU, put it in Terminal server as well as the DC and the Terminal service Users security group into the OU. Later I also added two group policies to the OU in which one is for Terminal Servers and the other one is for Terminal service users.

    As my title says itself I even added Terminal service users security group to the Security Tab under Terminal service users group policy and selected "Read" and "Apply Group Policy" Allow, also made some changes on the user interface, such as disable active desktop and redirect "Start Menu". I think I was correct so far, right? Then why I’m getting this problem? I even tried running Resultant Set of Policy but it shows everything OK.

    Do anyone of you guys have been through this problem? How can i fix it?

  2. #2
    Join Date
    Nov 2005
    Posts
    38

    RE: Group Policy Filtering: Denied (Security)

    Hey guys, i ran gpresult and found this some more information.

    Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
    Copyright (C) Microsoft Corp. 1981-2001

    Created On 30/03/2005 at 12:13:43 PM


    RSOP data for Domain\abc on Server1 : Logging Mode
    -------------------------------------------------

    OS Type: Microsoft(R) Windows(R) Server 2003, Standard
    Edition
    OS Configuration: Additional/Backup Domain Controller
    OS Version: 5.2.3790
    Terminal Server Mode: Application Server
    Site Name: Default-First-Site
    Roaming Profile:
    Local Profile: C:\Documents and Settings\abc
    Connected over a slow link?: No


    COMPUTER SETTINGS
    ------------------
    CN=SERVER1,OU=Terminal Servers,DC=Domain,DC=Domain,DC=com,DC=au
    Last time Group Policy was applied: 30/03/2005 at 12:13:35 PM
    Group Policy was applied from: Server1.Domain.Domain.com.au
    Group Policy slow link threshold: 100 kbps
    Domain Name: Domain
    Domain Type: Windows 2000

    Applied Group Policy Objects
    -----------------------------
    Default Domain Controllers Policy
    Default Domain Policy
    Local Group Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
    Terminal Service Users
    Filtering: Denied (Security)

    All Terminal Servers
    Filtering: Denied (Security)

    The computer is a part of the following security groups
    -------------------------------------------------------
    BUILTIN\Administrators
    Everyone
    Terminal Server Computers
    BUILTIN\Users
    BUILTIN\Pre-Windows 2000 Compatible Access
    Windows Authorization Access Group
    NT AUTHORITY\NETWORK
    NT AUTHORITY\Authenticated Users
    This Organization
    SERVER1$
    Domain Controllers
    NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
    Terminal Server Computers

    Resultant Set Of Policies for Computer
    ---------------------------------------

    Software Installations
    ----------------------
    N/A

    Startup Scripts
    ---------------
    N/A

    Shutdown Scripts
    ----------------
    N/A

    Account Policies
    ----------------
    GPO: Default Domain Policy
    Policy: MaxServiceAge
    Computer Setting: 600

    GPO: Default Domain Policy
    Policy: MaxTicketAge
    Computer Setting: 10

    GPO: Default Domain Policy
    Policy: MaxClockSkew
    Computer Setting: 5

    GPO: Default Domain Policy
    Policy: MaxRenewAge
    Computer Setting: 7

    Audit Policy
    ------------
    GPO: Default Domain Controllers Policy
    Policy: AuditPolicyChange
    Computer Setting: Success

    GPO: Default Domain Controllers Policy
    Policy: AuditPrivilegeUse
    Computer Setting: No Auditing

    GPO: Default Domain Controllers Policy
    Policy: AuditDSAccess
    Computer Setting: Success

    GPO: Default Domain Controllers Policy
    Policy: AuditAccountLogon
    Computer Setting: No Auditing

    GPO: Default Domain Controllers Policy
    Policy: AuditObjectAccess
    Computer Setting: No Auditing

    GPO: Default Domain Controllers Policy
    Policy: AuditAccountManage
    Computer Setting: Success

    GPO: Default Domain Controllers Policy
    Policy: AuditLogonEvents
    Computer Setting: No Auditing

    GPO: Default Domain Controllers Policy
    Policy: AuditProcessTracking
    Computer Setting: No Auditing

    GPO: Default Domain Controllers Policy
    Policy: AuditSystemEvents
    Computer Setting: Success

    User Rights
    -----------
    GPO: Default Domain Controllers Policy
    Policy: MachineAccountPrivilege
    Computer Setting: Authenticated Users

    GPO: Default Domain Controllers Policy
    Policy: DenyNetworkLogonRight
    Computer Setting: Domain\SUPPORT_388945a0

    GPO: Default Domain Controllers Policy
    Policy: RestorePrivilege
    Computer Setting: Server Operators
    Backup Operators
    Administrators

    GPO: Default Domain Controllers Policy
    Policy: TcbPrivilege
    Computer Setting: Domain\BackupExec
    Domain\Administrator

    GPO: Default Domain Controllers Policy
    Policy: SystemProfilePrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: DenyServiceLogonRight
    Computer Setting: N/A

    GPO: Default Domain Controllers Policy
    Policy: ServiceLogonRight
    Computer Setting: Domain\Administrator
    NETWORK SERVICE
    Domain\BackupExec

    GPO: Default Domain Controllers Policy
    Policy: UndockPrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: RemoteInteractiveLogonRight
    Computer Setting: Administrators
    Domain\Terminal Service Users
    Remote Desktop Users
    TERMINAL SERVER USER

    GPO: Default Domain Controllers Policy
    Policy: CreatePermanentPrivilege
    Computer Setting: N/A

    GPO: Default Domain Controllers Policy
    Policy: AuditPrivilege
    Computer Setting: NETWORK SERVICE
    LOCAL SERVICE

    GPO: Default Domain Controllers Policy
    Policy: TakeOwnershipPrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: CreatePagefilePrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: EnableDelegationPrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: DebugPrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: SystemTimePrivilege
    Computer Setting: Server Operators
    Administrators

    GPO: Default Domain Controllers Policy
    Policy: DenyBatchLogonRight
    Computer Setting: N/A

    GPO: Default Domain Controllers Policy
    Policy: BackupPrivilege
    Computer Setting: Server Operators
    Backup Operators
    Administrators

    GPO: Default Domain Controllers Policy
    Policy: CreateTokenPrivilege
    Computer Setting: DOMAIN\Administrator
    DOMAIN\BackupExec

    GPO: Default Domain Controllers Policy
    Policy: ChangeNotifyPrivilege
    Computer Setting: Pre-Windows 2000 Compatible Access
    Authenticated Users
    Administrators
    Everyone
    DOMAIN\Administrator

    GPO: Default Domain Controllers Policy
    Policy: SyncAgentPrivilege
    Computer Setting: N/A

    GPO: Default Domain Controllers Policy
    Policy: ProfileSingleProcessPrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: LoadDriverPrivilege
    Computer Setting: Print Operators
    Administrators

    GPO: Default Domain Controllers Policy
    Policy: InteractiveLogonRight
    Computer Setting: Account Operators
    Administrators
    Backup Operators
    DOMAIN\IUSR_WPS4
    DOMAIN\IUSR_WPS5
    DOMAIN\IUSR_WPS5DP
    DOMAIN\UniverseUsers
    Print Operators
    Server Operators

    GPO: Default Domain Controllers Policy
    Policy: RemoteShutdownPrivilege
    Computer Setting: Server Operators
    Administrators

    GPO: Default Domain Controllers Policy
    Policy: IncreaseBasePriorityPrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: NetworkLogonRight
    Computer Setting: Administrators
    Authenticated Users
    DOMAIN\IUSR_WPS4
    DOMAIN\IUSR_WPS5
    DOMAIN\IUSR_WPS5DP
    DOMAIN\IWAM_WPS4
    DOMAIN\IWAM_WPS5
    DOMAIN\IWAM_WPS5DP
    ENTERPRISE DOMAIN CONTROLLERS
    Everyone
    Pre-Windows 2000 Compatible Access

    GPO: Default Domain Controllers Policy
    Policy: LockMemoryPrivilege
    Computer Setting: DOMAIN\Administrator

    GPO: Default Domain Controllers Policy
    Policy: ShutdownPrivilege
    Computer Setting: Print Operators
    Server Operators
    Backup Operators
    Administrators

    GPO: Default Domain Controllers Policy
    Policy: SecurityPrivilege
    Computer Setting: DOMAIN\Exchange Enterprise Servers
    Administrators

    GPO: Default Domain Controllers Policy
    Policy: AssignPrimaryTokenPrivilege
    Computer Setting: DOMAIN\IWAM_WPS5DP
    DOMAIN\Administrator
    DOMAIN\IWAM_WPS5
    DOMAIN\IWAM_WPS4
    NETWORK SERVICE
    LOCAL SERVICE

    GPO: Default Domain Controllers Policy
    Policy: SystemEnvironmentPrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: IncreaseQuotaPrivilege
    Computer Setting: DOMAIN\IWAM_WPS5DP
    DOMAIN\Administrator
    DOMAIN\IWAM_WPS5
    DOMAIN\IWAM_WPS4
    Administrators
    NETWORK SERVICE
    LOCAL SERVICE

    GPO: Default Domain Controllers Policy
    Policy: BatchLogonRight
    Computer Setting: DOMAIN\IWAM_WPS5DP
    DOMAIN\IWAM_WPS5
    DOMAIN\IWAM_WPS4
    DOMAIN\SUPPORT_388945a0
    LOCAL SERVICE
    DOMAIN\IUSR_WPS4
    DOMAIN\IIS_WPG
    DOMAIN\IUSR_WPS5
    DOMAIN\Administrator
    DOMAIN\SQLDebugger
    DOMAIN\IUSR_WPS5DP

    GPO: Default Domain Controllers Policy
    Policy: DenyInteractiveLogonRight
    Computer Setting: DOMAIN\SUPPORT_388945a0
    DOMAIN\SQLDebugger

    Security Options
    ----------------
    GPO: Default Domain Policy
    Policy: TicketValidateClient
    Computer Setting: Enabled

    Event Log Settings
    ------------------
    N/A

    Restricted Groups
    -----------------
    N/A

    System Services
    ---------------
    N/A

    Registry Settings
    -----------------
    N/A

    File System Settings
    --------------------
    N/A

    Public Key Policies
    -------------------
    N/A

    Administrative Templates
    ------------------------
    GPO: Local Group Policy
    KeyName:
    Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{d2c34ab2-529a-46b2-b293-fc853fce72ea}\Description
    Value: 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows NT\Terminal
    Services\Shadow
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}\NoBackgroundPolicy
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}\NoGPOListChanges
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}\NoSlowLink
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}\NoGPOListChanges
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Local Group Policy
    KeyName:
    Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{191cd7fa-f240-4a17-8986-94d480a6c8ca}\SaferFlags
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows NT\Terminal
    Services\fSingleSessionPerUser
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}\NoSlowLink
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}\NoSlowLink
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName:
    Software\Policies\Microsoft\WindowsMediaPlayer\GroupPrivacyAcceptance
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}\NoGPOListChanges
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}\NoBackgroundPolicy
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName:
    Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDisconnect
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Local Group Policy
    KeyName:
    Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{191cd7fa-f240-4a17-8986-94d480a6c8ca}\Description
    Value: 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}\NoGPOListChanges
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}\NoSlowLink
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Local Group Policy
    KeyName:
    Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktop
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName:
    Software\Policies\Microsoft\WindowsMediaPlayer\QuickLaunchShortcut
    Value: 110, 0, 111, 0, 0, 0
    State: Enabled

    GPO: Local Group Policy
    KeyName:
    Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\DefaultLevel
    Value: 0, 0, 4, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}\NoBackgroundPolicy
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Local Group Policy
    KeyName:
    Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{7272edfb-af9f-4ddf-b65b-e4282f2deefc}\Description
    Value: 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows NT\Terminal
    Services\MaxInstanceCount
    State: disabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows NT\Terminal
    Services\fPromptForPassword
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7}\NoSlowLink
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Local Group Policy
    KeyName:
    Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\TransparentEnabled
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}\NoGPOListChanges
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName:
    Software\Policies\Microsoft\Windows\System\GroupPolicyRefreshTimeOffsetDC
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}\NoGPOListChanges
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows NT\Terminal
    Services\KeepAliveInterval
    Value: 5, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName:
    Software\Policies\Microsoft\Windows\Installer\EnableAdminTSRemote
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName:
    Software\Policies\Microsoft\WindowsMediaPlayer\DesktopShortcut
    Value: 110, 0, 111, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName:
    Software\Policies\Microsoft\Windows\System\GroupPolicyRefreshTimeOffset
    Value: 30, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}\NoBackgroundPolicy
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}\NoSlowLink
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows NT\Terminal
    Services\DeleteTempDirsOnExit
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows NT\Terminal
    Services\PerSessionTempDir
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName:
    Software\Policies\Microsoft\Windows\CurrentVersion\Internet
    Settings\Security_zones_map_edit
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows
    NT\Reliability\ShutdownReasonOn
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName:
    Software\Policies\Microsoft\Windows\System\GroupPolicyRefreshTime
    Value: 90, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName:
    Software\Policies\Microsoft\Windows\System\GroupPolicyRefreshTimeDC
    Value: 3, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Internet
    Explorer\Infodelivery\Restrictions\NoSplash
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}\NoGPOListChanges
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows NT\Terminal
    Services\WFHomeDir
    Value: 68, 0, 58, 0, 92, 0, 82, 0, 101, 0, 109, 0,
    111, 0, 116, 0, 101, 0, 32, 0, 85, 0, 115, 0, 101, 0, 114, 0, 32, 0, 80, 0,
    114, 0, 111, 0, 102, 0, 105, 0, 108, 0, 101, 0, 115, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}\NoGPOListChanges
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows NT\Terminal
    Services\fNoRemoteDesktopWallpaper
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Local Group Policy
    KeyName:
    Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{d2c34ab2-529a-46b2-b293-fc853fce72ea}\SaferFlags
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Conferencing\NoRDS
    Value: 1, 0, 0, 0
    State: Enabled

  3. #3
    Join Date
    Nov 2005
    Posts
    38

    RE: Group Policy Filtering: Denied (Security)

    The second half of the result from gpresult

    GPO: Local Group Policy
    KeyName:
    Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{8868b733-4b3a-48f8-9136-aa6d05d4fc83}\SaferFlags
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName:
    Software\Policies\Microsoft\WindowsMediaPlayer\DisableAutoUpdate
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}\NoBackgroundPolicy
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName:
    Software\Policies\Microsoft\Windows\Installer\DisableUserInstalls
    Value: 2, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}\NoBackgroundPolicy
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Internet
    Explorer\Infodelivery\Restrictions\NoUpdateCheck
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Internet
    Explorer\Infodelivery\Restrictions\NoJITSetup
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}\NoSlowLink
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}\NoSlowLink
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Local Group Policy
    KeyName:
    Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{7272edfb-af9f-4ddf-b65b-e4282f2deefc}\SaferFlags
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows NT\Terminal
    Services\KeepAliveEnable
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName:
    Software\Policies\Microsoft\Windows\CurrentVersion\Internet
    Settings\Security_options_edit
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName:
    Software\Policies\Microsoft\Windows\System\GroupPolicyMinTransferRate
    Value: 100, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}\NoBackgroundPolicy
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows
    NT\Reliability\ShutdownReasonUI
    Value: 3, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}\NoBackgroundPolicy
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Local Group Policy
    KeyName:
    Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\PolicyScope
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Local Group Policy
    KeyName:
    Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{8868b733-4b3a-48f8-9136-aa6d05d4fc83}\Description
    Value: 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName:
    Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWelcomeScreen
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7}\NoGPOListChanges
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows\Group
    Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}\NoGPOListChanges
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows NT\Terminal
    Services\WFHomeDirUNC
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows NT\Terminal
    Services\fDisableAutoReconnect
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: All Terminal Servers
    KeyName: Software\Policies\Microsoft\Windows NT\Terminal
    Services\WFHomeDirDrive
    Value: 90, 0, 58, 0, 0, 0
    State: Enabled




    USER SETTINGS
    --------------
    CN=abc,OU=test TS,DC=Domain,DC=Domain,DC=com,DC=au
    Last time Group Policy was applied: 30/03/2005 at 12:13:35 PM
    Group Policy was applied from: Server1.Domain.Domain.com.au
    Group Policy slow link threshold: 500 kbps
    Domain Name: DOMAIN
    Domain Type: Windows 2000

    Applied Group Policy Objects
    -----------------------------
    Default Domain Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
    Local Group Policy
    Filtering: Not Applied (Empty)

    The user is a part of the following security groups
    ---------------------------------------------------
    Domain Users
    Everyone
    BUILTIN\Users
    BUILTIN\Pre-Windows 2000 Compatible Access
    REMOTE INTERACTIVE LOGON
    NT AUTHORITY\INTERACTIVE
    NT AUTHORITY\Authenticated Users
    This Organization
    LOCAL
    Terminal Service Users

    The user has the following security privileges
    ----------------------------------------------

    Bypass traverse checking
    Add workstations to domain

    Resultant Set Of Policies for User
    -----------------------------------

    Software Installations
    ----------------------
    N/A

    Logon Scripts
    -------------
    N/A

    Logoff Scripts
    --------------
    N/A

    Public Key Policies
    -------------------
    N/A

    Administrative Templates
    ------------------------
    N/A

    Folder Redirection
    ------------------
    N/A

    Internet Explorer Browser User Interface
    ----------------------------------------
    N/A

    Internet Explorer Connection
    ----------------------------
    N/A

    Internet Explorer URLs
    ----------------------
    N/A

    Internet Explorer Security
    --------------------------
    N/A

    Internet Explorer Programs
    --------------------------
    N/A

  4. #4
    Join Date
    Sep 2004
    Posts
    82

    RE: Group Policy Filtering: Denied (Security)

    Hello Ronan, as per my experience I would not recommend you to move your DC from the Domain Controllers OU. The reason is quite good as Microsoft itself won’t support that. Also in case you’re your settings are applied on the Computer Configuration you will need to make sure that you have enabled Loopback Processing in your Group Policy.

Similar Threads

  1. Replies: 3
    Last Post: 24-02-2011, 11:25 PM
  2. Replies: 3
    Last Post: 05-03-2009, 10:00 PM
  3. Replies: 1
    Last Post: 13-07-2008, 12:43 AM
  4. Group Policy security and system shut down!
    By Hrishia in forum Windows XP Support
    Replies: 1
    Last Post: 02-05-2008, 08:12 AM
  5. GPO - Access Denied (Security Filtering)
    By Cris Han in forum Active Directory
    Replies: 1
    Last Post: 03-07-2007, 02:32 PM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,711,704,599.47408 seconds with 17 queries