Using SUS With 2 Group Policies

[leeym]

Ok this is what I did:

1. Created 2 separate OU's (SUS-Workstations & SUS-Servers)
2. Within each OU, created a security group (each named SUS-Workstations & SUS-Servers)
3. For each security group, added the appropriate computer
4. Created new GPO's called SUS-Workstation & SUS-Server (each with similar, but slightly different characteristics)
5. In each GPO, applied a security filer. Example: For the SUS-Servers GPO, added the SUS-Servers security group
6. Updated GPO security group permissions to read/write
7. Linked & enabled both GPO's to the domain

What's odd is at first after several restarts, nothing worked. Then I added the 'Authenticated Users' group to the security filter along with read/write permissions, and it worked. BUT only for the SUS-Servers area.

Why not for the workstations. Everything else is consistent. Aalso, does this all sound correct?

Thanks

 

[stash]

Objects don't need read/write permissions to apply GPOs. Objects need two permissions: read and apply group policy.

 

[imported_Phil]

Originally posted by: STaSh
Objects don't need read/write permissions to apply GPOs. Objects need two permissions: read and apply group policy.

Where do you find Apply Group Policy? I had to use GPOs the other day on a 2000 AD domain, and couldn't find that particular security permission.

 

[spyordie007]

in the group policy msc; under delegation>advanced

 

[stash]

If you are using GPMC, all you need to do is add the appropriate users or groups to the scope box. This automatically gives them read and apply group policy permissions.

 

[imported_Phil]

Thanks 🙂

[Edit] /threadjack 😉