Denied GPO

Maor Zohar
Occasional Visitor


We have an OU called "Stations" with all the computer accounts, and they resides in a several OUs under the "Stations" OU. 

I linked a new GPO to the "Stations" OU, and all Sub-OUs should get the policy.

I created a group under out "Groups" OU, that is not under "Stations" OU.

I added to that group two computer accounts.

For some reason, on the gpresult i'm getting "Filtering:  Denied (Security)" on this policy.

I even tried to move the group to the "Stations" OU but no change.

it's working only if i put in the GPO scope specifically the two computers account, and not in a group.

I want to work with a group.


How can i make it work? where is the problem?



Related Conversations
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
30 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
7 Replies