Need help with security filter of gpo in windows server

I have comprised and an issue through security filtering when applying WSUS GPO. In GPRESULT, system GPO is applied merely when Authenticated Users group added to sanctuary filtering along commencing from side to side wsus_servers_restart group pic. If Authenticated Users group is not added to security filtering, the system GPO is not functional (filtering denied). Even when Authenticated Users group is added commencing from side to side wsus_servers_restart group, and the GPO is applied, the systems group is not scheduled under this system is a fraction of the following security group in GPRESULT.

The GPO merely apply to the objects not be relevant to the groups. You not be able to link to a GPO that with the intention of contains a security group the WSUS_computers. This is by design. The merely method you take I link the GPO to the OU and in security filtering determine to add the security group WSUS_computers it runs is that to facilitate you add the systems object in addition in this OU. You be able to pull dc01,scvmm,wsus 3 computers object in your pic into this OU, and utilizing your security group WSUS_computers to observe whether it works.

It permits you to disagree with through your statement beneath. Commencing from my knowledge security groups are AD objects and why does security filtering permits to add systems group to filtering if it is not competent to apply GPO to the group.

The GPO merely apply to the objects users and systems, not be appropriate to the assemblage. Your pic works for the reason that you linked to the domain level. It includes these 3 systems. Is not it right. The objects fall into two extensive categories: resources (e.g., printers) and protection principals user or the system accounts and groups. Security principals are allocated unique security identifiers (SIDs).

You not be able to linked to a GPO through a system group apart commencing from there are computer objects contained. Commencing from the pic you be able to observe that 3 systems are members contained of the group WUS_servers_restart. Let me just presently rephrase my question regarding GPO in my case WSUS GPO. Let say I desire to apply WSUS GPO to an OU to facilitate contains a security group WSUS_computers.