Tuesday, September 12, 2017

GPOs – Attention! MS16-072 May Cause Security Filtering GPOs to Fail !!

image_thumb3

Here’s an important one!

If you’re using GPOs with users or groups security filtering you may need to make changes after installing MS16-072.

Basically the group policy just…stops working!

This happens because GPO is missing the Read permissions for the Authenticated Users group.

To resolve this:

  • Open Group Policy Management Console (GPMC)
  • Navigate to the GPO and click Delegation tab on the right
  • Add the Authenticated Users group with Read permissions on the GPO

And the GPO works again!

No comments:

Post a Comment