On my window Active Directory server, why does my security filters doen't apply group policy when I removed the 'authentication users' and put single users who will recive the Group Policy Update?

Question

So recently I am trying assign a software deployment like 'Google Browser' to one my user account. So when I edit everything on the group policy section, my security fitter doesn't work after assigning the User and removing the 'authentication users'. I don't want everyone to have this "Google Browser', I want only one person to receive this, but Group Policy doesn't apply. Any ideas what to do?

Answer 1

Hello TechQ,

Thank you for posting in our Q&A forum.

Based on the description, I understand you assign a software deployment to AD user via "software installation" policy under "User Configuration".

You want only one person to install software. Please try the setting below:

1.Keep the Authenticated Users, and uncheck the "Apply group policy" permission for Authenticated Users.

2.Add this AD user and make this user have "read" and "Apply group policy" permissions.

Hope the information above is helpful.

Best Regards,
Daisy Zhou

===============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Hi @TechQ

Group Policy requires each computer account to have permission to read GPO data from a domain controller in order for User Group Policy setting to be successfully applied. Removing the Authenticated Users group may prevent processing of User Group Policies. Add the Domain Computers froup with at least read-only permissions