Windows – GPO Troubleshooting – Security Filtering – Computer Configuration

active-directorygroup-policywindows

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add the Domain Computers security group to the Security Filtering?

The security group does not get added and GPResult is blank for the Computer Configuration section. Computers are in the correct OU that the GPO is applied/linked and there isn't any WMI filtering occuring. Any ideas?

Thanks!

UPDATE:

With a command prompt opened as Administrator I did the following:

  1. gpupdate /force
  2. gpresult /H report.html

The report shows the Computer Configuration Preference to add an AD security group to the local administrators group. Unfortunately, the group is still not added to the local admins group. Any other ideas?

Best Answer

You will need to apply the GPO to the OU that the PC is in. Also it is a good idea to do a gpupdate /force on the computer.

Related Topic