1

I have a problem with a gpo on AD. Well, I have a domain root where I have only one domain policy. In the policy there is a permission on "log on as service" and two 2 groups added. Down the root I have 1 OU and some other leaf OU as user,groups,computers and servers. Under servers I have al my servers. Then the servers have just one gpo that is the domain policy. The servers have applied the domain gpo as it should be. But there is one that have only one group under the "log on as service" policy. If I run gpo result it show me that the server should have just one group and it look that it apply the policy correctly. But for my logic it should have two groups... what's happening ?

3
  • 1
    Where does the resultant set of policy show that setting as coming from? Oct 2, 2013 at 17:13
  • Do you have any SCECLI errors in your event log? Perhaps with an error 0x534? See: support.microsoft.com/kb/324383
    – Zoredache
    Oct 2, 2013 at 18:24
  • ok, it should be resolved. I dont know why the kaspersky antivirus would have blocked the gpo apply.
    – Luigi
    Oct 3, 2013 at 9:54

1 Answer 1

0

Kaspersky blocks gpo application. Do not know why.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .