Mastering Active Directory

Security filtering

Before you apply the security filtering, the first thing to make sure is that Group Policy is mapped correctly to the site, domain, or OU. The security group or the objects you are going to target should be at the correct level where the Group Policy is mapped.

We can use the GMPC or PowerShell cmdlets to add the security filtering to GPO:

As you can see, by default, any policy with the Authenticated Users group is added to the Security Filtering. This means that by default, the policy will apply to any authenticated user in that OU. When we add any group or object to security filtering, it also creates an entry under delegation. ...