GPOs – Attention! MS16-072 May Cause Security Filtering GPOs to Fail !!

Here’s an important one!

If you’re using GPOs with users or groups security filtering you may need to make changes after installing MS16-072.

Basically the group policy just…stops working!

This happens because GPO is missing the Read permissions for the Authenticated Users group.

To resolve this:

• Open Group Policy Management Console (GPMC)
• Navigate to the GPO and click Delegation tab on the right
• Add the Authenticated Users group with Read permissions on the GPO

And the GPO works again!