KB3159398 – MS16-072 Group Policy update issues
With the latest security update KB3159398 from Microsoft installed on our machines we have noticed that some of our group policies failed to apply. After this update Authenticated users group needs to have the read permissions on each group policy object.
Since we had filtering set on several of our policies where we have removed Authenticated users group and have added only the security group that should have permissions for the object, our policies stopped applying.
This issue may occur if the Group Policy Object is missing the Read permissions for the Authenticated Users group or if you are using security filtering and are missing Read permissions for the domain computers group.
To resolve this issue, open Group Policy Management editor and follow one of these steps:
Add the Authenticated Users group with Read Permissions on the Group Policy Object (GPO).
If you are using security filtering, add the Domain Users group with read permission.
|...we need you to hear this: More people are reading our website than ever but advertising revenues across the media are falling fast.|
|We want to keep our content as open as we can. We are independent, and our quality work takes a lot of time, money and hard work to produce.|
|You can support us with Multipass which enables you to pay for a bundle of websites: you can finance the work of journalists and content creators you love.|