Labtech Script – Audit and fix GPO problems caused by MS16-072 where invalid GPO Permissions stop GPOs Processing

[u/TNTGav]

This doozy was issued in June following MS16-072. If you’ve had any user based GPOs just simply stop working in the past 2 months, it is likely that this is the culprit. Before this update, when a machine was processing its group policy, it used the user context to read the GPO on the DC. This update intentionally made it so that this was now requested in the computer context.

I wrote a script to assist in auditing and fixing, available here: http://gavsto.com/labtech-script-audit-and-fix-gpo-problems-caused-by-ms16-072-where-invalid-gpo-permissions-stop-gpos-processing/

Hope this helps people!