search for: _authenticated_users

Displaying 2 results from an estimated 2 matches for "_authenticated_users".

Did you mean: authenticated_users
2024 May 02
1
GPO Editor says "Access denied" for Group Policy Objects
...9;;;SO)(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;AU) Which in a more readable form is: Owner:LOCAL_ADMIN Group:BUILTIN_ADMINISTRATORS D:P(Allow;Full control;;;BUILTIN_ADMINISTRATORS)(Allow;Read and Execute,Inherited;;;SERVER_OPERATORS)(Allow;Full control;;;LOCAL_SYSTEM)(Allow;Read and Execute,Inherited;;;_AUTHENTICATED_USERS) Now all that depends on the various users and groups having the same ID on every DC, the problem with that is, you cannot depend on every DC giving the same IDs to users and groups, they are handed out on a 'first come' basis. This is why you need to sync idmap.ldb from one DC (usually th...
2024 May 02
1
GPO Editor says "Access denied" for Group Policy Objects
Hello all, to return to the original topic: My original problem was that I could not edit GP objects with the GP Editor, even as Domain admin. I always got "access denied". A sysvolcheck returned no errors and the Windows "Security" tab for the object in question on the sysvol share looked correct. I now found out that the group id of the sysvol folder (and everything