@baseliner
John Philipson started the topic Cannot Filter Group Policy on Computer Security Group in IT Administration Forum 5 years, 4 months ago
Hi, I’m using computer based,WSUS client targeting policies on our Servers OU and I’ve split the servers into 4 security groups (from UAT to critical) and have set the policies at the root of the Servers OU, with the filtering set on the Policy according to the respective GPO, so GPU – UAT, has the filtering for security group UAT, which has all the appropriate computer accounts for that group (and yes the computers do exist in the servers OU)
However, regardless of whether I use a deny or accept (obviously the preference), on the security groups in the Delegation Tab, the only way I can get the computer policy to apply, is to explicitly add the computer account, in the security filtering scope tab (that works every time). So for some reason the GPO doesn’t like the security group (I have made sure I keep the “Authenticated users” referenced in the Delegation Tab as read only and tried the “Domain Computers” group as Read only) but nothing helps to recognise the group.
Thanks very much Michael, Yes I tried deleting the two manually created accounts (as well as the profiles) but no joy.
Which entry are you referring to that shows that situation, please ?
Hi, Thanks very much for all the detailed information here. Despite trying all the various command shown here and ones recommended in other forums (like the one shown below),
Get-AppxPackage -AllUsers | where-object {$_.name –notlike “*store*”} | Remove-AppxPackage
Get-appxprovisionedpackage –online | where-object {$_.packagename –notlike “*store*”} | Remove-AppxProvisionedPackage -onlinewhich is very powerful and removes all apps (except Windows store), including Provisioned ones) for ALL users, I still cannot get passed the Sysprep process of MDT.
I have managed to capture an earlier revision of my Gold Image but whatever I try now I get the same error
SYSPRP Failed to remove apps for the current user: 0x80073cf2.
SYSPRP Exit code of RemoveAllApps thread was 0x3cf2.
When I run the command below
Get-AppxPackage -AllUser | Where PublisherId -eq 8wekyb3d8bbwe | Format-List -Property PackageFullName,PackageUserInformation.
I can see that there are still a great many applications are still showing as installed but they appear to uninstallable ??
I have even tried deleting the local accounts associated with the apps but still no joy
PS C:windowssystem32> Get-AppxPackage -AllUser | Where PublisherId -eq 8wekyb3d8bbwe | Format-List -Property PackageFullName,PackageUserInformation
PackageFullName : Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
PackageUserInformation : {S-1-5-21-4268636132-2605224068-2860058039-500 [Admin-JG]: Installed, S-1-5-21-1106070979-359232129-1136263860-9524
[S-1-5-21-1106070979-359232129-1136263860-9524]: Installed, S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed,
S-1-5-21-4268636132-2605224068-2860058039-1003 [Admin-BKP]: Installed}PackageFullName : Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe
PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed, S-1-5-21-4268636132-2605224068-2860058039-1003 [Admin-BKP]: Installed}PackageFullName : Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe
PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed, S-1-5-21-4268636132-2605224068-2860058039-1003 [Admin-BKP]: Installed}PackageFullName : Microsoft.NET.Native.Framework.1.3_1.3.23901.0_x86__8wekyb3d8bbwe
PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed}PackageFullName : Microsoft.NET.Native.Framework.1.3_1.3.23901.0_x64__8wekyb3d8bbwe
PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed}PackageFullName : Microsoft.VCLibs.140.00_14.0.23816.0_x86__8wekyb3d8bbwe
PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed}PackageFullName : Microsoft.VCLibs.140.00_14.0.23816.0_x64__8wekyb3d8bbwe
PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed}PackageFullName : Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe
PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed}PackageFullName : Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe
PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed}John Philipson became a registered member 5 years, 5 months ago
