Mastering Active Directory - Second Edition

Security filtering

Before you apply security filtering, the first thing to check is whether the Group Policy is mapped correctly to the site, domain, or OU. The security group or the objects you are going to target should be at the same level as where the Group Policy is mapped.

We can use the GMPC or PowerShell cmdlets to add security filtering to our GPO:

As you can see, by default, any policy that has an Authenticated Users group is added to the Security Filtering section. This means that, by default, the policy will apply to any authenticated user in that OU. When we add any group or object to security filtering, it also creates an entry ...