[Samba] GPO permissions

Kris Lou klou at themusiclink.net
Tue Feb 19 17:51:20 UTC 2019

> I'm trying to track down why some GPOs are essentially invisible to the
> clients, even though they exist in GPM and the files exist.  So, they
> aren't being applied or denied.

Replying to myself:

The above seems to be related to both User and Computer GPO's being pulled
down by the Computer's context.  As such, the Domain Computers (or
Authenticated Users) need to have Read access to the GPO on the Delegation
tab.  Otherwise, it's "essentially invisible."


More information about the samba mailing list