AD on the newly built a GPO users to ban the use of USB, the object is a DOMAIN USER, but cannot take effect on the client,

Then my role to the USer can take effect situation what's the problem!

CodePudding user response:

DOMAIN USER's DOMAIN USER group?

CodePudding user response:

Users want to troubleshoot the if the GPO function, and then check whether the client has received the login account under this strategy also check it

CodePudding user response:

2016 update patch, if it is a strategy for users, also has the authority to read some strategies need computer
So if you delete the default auth this group, in addition to plus the user you want to apply, also need to add dain.com puters read permissions