Shulou(Shulou.com)06/03 Report--

Recent leaders have asked to use domain push printers, and after configuring user policies as required, they plan to push by region, that is, apply the policies to the entire domain, delete all original authenticated users through security screening locations, and add specified address area member groups.

After the configuration is completed, log in to the user to refresh the group policy, but it is not applied. Is there something wrong with the policy? After adding it back to Authenticated Users, it is found that the policy has been obtained normally, so the problem must be that when you re-delete Authenticated Users on security filtering, read the warning when deleting it carefully.

What is this? there is no such thing before. The link to the access prompt turned out to be a security loophole and has been updated. (link address: https://support.microsoft.com/zh-cn/help/3163622/ms16-072-security-update-for-group-policy-june-14-2016)

According to the instructions, delete the original Authenticated Users group, add the Domain Computers group (the default will be read and apply group policy permissions, for example, to prevent interference, you can delete the application group policy permissions), and add user groups in the specified region

Once again, gpupdate / target:user refreshes the user group policy, which can be applied normally to solve the problem.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.