Shulou(Shulou.com)06/03 Report--

Recently, it has been found that a lot of user group policies are invalid, and it is found that they have a common feature, that is, the user filter they use removes the default Authernticated users from the Security filtering and adds the corresponding specific users or groups to which this group policy should apply.

It took a long time to discover that it was Microsoft's security update that changed the way group policy was applied. The security update is

MS16-072 date: 2016 06 14

Https://support.microsoft.com/en-sg/kb/3163622

If you run gpresult / h result.html to open result.html, you should find a lot of entries in denied GPOs that Inaccessible cannot access (see figure).

This indicates that the group policy of your 2008 2012 active Directory domain is affected by this update.

The solution is shown in the figure above, which requires the addition of the domain computers user group.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.