John Goldin — April 19, 2011 @ 7:23 pm

I attended the AADUG meeting the other night and enjoyed your presentation. I am trying one of your suggestions using Set-GPPermissions. Here is what I did.

Set-GPPermissions -Name “empty” -PermissionLevel None -TargetName “Authenticated Users” -TargetType “Group” -Replace

I got an error stating:
Set-GPPermissions : There is no such object on the server

Next I did:
Get-GPPermissions -Name “empty” -All
I got information about the permissions set on the “empty” gpo and Authenticated Users was on the list.

Trustee: Authenticated Users
TrusteeType: WellKnownGroup
Premission: GPOApply
Inherited: False

Do I have a syntax error some where?

Thanks for your help,
John Goldin

Michael Kerrick — April 28, 2011 @ 11:22 am

I’m hoping you can straighten out a little confusion we are having. I have read and been told that installing SP3 on XP and SP2 on Server 2003 R2 installs the necessary structures to allow them to process Group Preferences. But some of our testing, and other documentation I have read, implies this is not true.

I haven’t setup a full blown test yet, but I thought I would get a little guidance from you before I invest alot of time on this.

Thank you,

Michael