Get The Rule Does Not Contain Any - Gpo

Microsoft's Group Policy Object (GPO) is a collection of Group Policy settings that defines what a system will look like and how it will behave for a defined group of users. Microsoft provides a program snap-in that allows you to use the Group Policy Management Console (GPMC).

Blocking inheritance prevents the settings in GPOs that are linked to higher-level sites, domains, or organizational units from being automatically inherited by the specified domain or OU. On other end enforced option prevents a GPO from being overridden by other GPO.

Check the Security Filtering settings in your policy. By default, all new GPO objects in the domain have the permissions for the Authenticated Users group enabled. This group includes all users and computers in the domain. It means the policy will be applied to all users and computers within its scope.

Microsoft's Group Policy Object (GPO) is a collection of Group Policy settings that defines what a system will look like and how it will behave for a defined group of users. Microsoft provides a program snap-in that allows you to use the Group Policy Management Console (GPMC).

GPOs are processed in what's known as an LSDOU order: local, site, domain, organization unit (OU). That means first, the policy on the local computer gets processed. This is followed by Active Directory policies from the site level to the domain. The next order of processing is into the organizational unit.

Enforcing a GPO creates a "no override" policy setting on the GPO, which prevents any other GPOs linked to parent containers from overriding the GPO's settings.

You will need to grant domain computers with READ access on the delegation tab before it will work. For every GPO with user or group security filtering you must add to the “Delegation” tab “Authenticated users” group with permissions “READ”. Security filtering can stay the same.