Web lists-archives.com

Re: [Samba] Group Policy Permissions

On Tue, 14 Aug 2018 20:15:04 +0200
Michal Sládek via samba <samba@xxxxxxxxxxxxxxx> wrote:

> Thank you for your suggestion, I read the whole discussion.
> My situation is little bit different - my machine policy works, but it
> stops working once I remove Apply permission from Authenticated Users
> and replace it with Read and Apply permission for Domain Computers.
> Group Policy Results in RSAT shows Reason Denied: Access Denied
> (Security Filtering) for affected computer.
> The same result I get with command gpresult /Z /SCOPE COMPUTER:
>     The following GPOs were not applied because they were filtered out
>     -------------------------------------------------------------------
>         Import CA Certificates
>             Filtering:  Denied (Security)
> I don't understand why Domain Computers group is not enough...

That triggered a memory 'MS16-072', see here:


and here:


Also here:



To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba