question

AlexBedard-5684 avatar image
0 Votes"
AlexBedard-5684 asked FanFan-MSFT commented

GPresult gives access denied for group list

We have a user for which a GPO is not applying

When we do a GPresult -r it lists the GPO objects but for security groups it says "An unexpected error has occured, access is denied"

Normally at this point I'd consider remaking the account, but this happens to be the CEO...

windows-group-policy
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
 
Just want to confirm the current situations.
If there's anything you'd like to know, don't hesitate to ask.

Best Regards,

0 Votes 0 ·

1 Answer

FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered

Hi,

Did you check the scope and permission delegation for the user on this GPO?
The user needs the read and apply permission as following:
91515-4274.jpg

You can check the permission by:
Click the GPO and select the Delegation, click advanced option:
91516-4275.jpg
Best Regards,


4274.jpg (66.1 KiB)
4275.jpg (91.5 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.