Search code examples
securitypowershellfilterpermissionsgpo

GPO security filter with powershell Set-GPPermissions cmdlet


When i try to change security settings for "Authenticated users" on MyGPO, it return me a error: Set-GPPermissions : The operation cannot be completed because "Authenticated users" is not a valid security group.

I use this code:

Set-GPPermissions -Name MyGPO -PermissionLevel none -TargetName "Authenticated users" -TargetType group

Solution

  • Ok, i found the solution, it a known issue with Set-GPPermissions / Get-GPPermissions Cmdlet on Windows 7 / 2008R2. A hotfix (kb978838) is available, it can be downloaded here. System must be restarted after installation...