As in the subject, does a GPO apply if "Security Filtering" tab is empty, but there is security group in Delegation which has Read and Apply rights?
Security Filtering tab says "The settings in this GPO can only apply to the following groups, users and computers:"
So does the security group must be also in the Security Filtering tab, or is it enough if it is in Delegation with correct rights?
Thanks,
Best Answer
As of today, adding an "Apply group policy" permission via the Delegation tab adds the security principal to the Scope tab automatically and vice versa. (Note, the "Read" permission alone is not sufficient.) I'm not sure if this is was a Windows Update and has been changed since you asked this question.
Therefore, the answer is yes: It is sufficient to add the principals through the delegation tab, provided you apply the correct permissions.