Newly created Group Policy does not get applied? Try this!

Recently, I created a standardized signature in Microsoft Exchange 2013 for a new business group.

signature1.jpg

At the same time, I created a Microsoft group policy to prevent users from creating new or using an existing signature in Microsoft Outlook.

signature2.jpgsignature3.jpg

Since this should apply only to the new business group, I specified the same business group under Security Filtering within this group policy.

signature4.jpg

For some reason, however, this group policy did not apply even after running gpudate/force on and even rebooting user’s workstation. Upon running gpresult /h c:\result.html, I noticed that the group policy name was shown as a GUID, and it was denied due to Inaccessible.

signature5.jpg

As a result, users could still access the signature field when composing a new email in Microsoft Outlook.

signature15

Upon further research, it turns out this was due to security update MS16-072.

signature6

I then followed the suggestion and resolved this issue by adding Domain Computers with only Read permission to Delegation of this group policy.

signature7signature8.jpgsignature9.jpgsignature10.jpg

You can further verify this permission by clicking Advanced… on the bottom of the same screen.

signature11.jpgsignature12.jpg

After another round of running gpudate/force and rebooting user’s workstation, I ran gpresult /h c:\result.html again. This time the group policy applied properly. Also, it is showing the correct name for this group policy.

signature13.jpg

Finally, I launched Microsoft Outlook and confirmed I could no longer create new or use the existing signature as the field is now absent altogether.

signature14.jpg

I hope you find this post helpful.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.