RSOP gives me Access Denied (security filtering)

[paulhthomas]

Hi all, hope you can help, this is confusing me!
I have a GPO that disables the

User Config > Admin Templates > Windows Components > Task Scheduler > Prohbit Browse

In other words, it allows the user to browse their tasks on the local machine.

I've checked the ACL on the GPO and all looks ok.
The user is part of a group which has read and apply gpo assigned to it, however when I run RSOP against the user and her pc I get the Access Denied (security filtering) error against that GPO. Others apply ok.
I've tried adding her user account to the acl and giving her the permissions directly (as opposed to the group) but still no joy.
The only thing I've noticed is the Authenticated users group is in the ACL but has no permissions assigned, no allows or denys. I assume this should still be ok?

There are other groups assigned to the gpo but all have allow read and apply.

Any ideas?

Thanks

Paul Thomas
N+, MCP, MCSA

Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Passed
70-294 - Passed
70-284 - Passed
70-297 - Loading...

 

[supportahm1980]

Is that policy a computer based policy or user?

Do you have the user in the security tab and set to "apply policy' and read rights.

 

[paulhthomas]

sorry, for some reason whoever set the policy up has set it in both, but the computer policy applies ok. It's the user I'm having problems with.

As per my original post, the group has apply and read permissions for the gpo.

thanks

Paul Thomas
N+, MCP, MCSA

Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Passed
70-294 - Passed
70-284 - Passed
70-297 - Loading...