GPO - Local Users and Groups - Item level targeting - Security Group - Removed from security group and local group but it keeps coming back

Question

I have a GPO that adds a security group to the local Administrators group using item-level targeting (another security group with servers). I remove the server in question from the item-level target group and manually remove the group from Administrators. When I do a gpupdate, it adds the group back. The GPO is set to update (action).

That server is no longer in the item-level targeting group. Why is it adding the group back during a gpupdate after it has been removed?

Answer 1

Hi TJCooperWhatever,

Thank you for posting in the Microsoft Community Forums.

Recheck GPO settings: Make sure that the GPO settings are correct and that no unnecessary groups are added to the local Administrators group.

Running gpresult /h C:gpresult.html at the command prompt generates an HTML report detailing the policy settings applied to the computer. This helps you better understand which strategies are being applied.

Relink or remove GPOs: If the problem persists, consider removing or relinking the GPOs from the OU that contains that server and check if the issue is resolved.

Check the system event log for details about any errors that may have occurred during Group Policy processing.

Best regards

Neuvi Jiang

Answer 2

I am unable to select a User Group for an Item level targeting in a file update. This file update is in the User Section of policy.