Here’s an important one!
If you’re using GPOs with users or groups security filtering you may need to make changes after installing MS16-072.
Basically the group policy just…stops working!
This happens because GPO is missing the Read permissions for the Authenticated Users group.
To resolve this:
- Open Group Policy Management Console (GPMC)
- Navigate to the GPO and click Delegation tab on the right
- Add the Authenticated Users group with Read permissions on the GPO
And the GPO works again!