Active Directory Groups

[WTTG]

I have an AD environment, where users have multiple groups. I have 2 custom policies and the default policy. (Student and Staff)

As I said users are in multiple groups.

Student Block list - attached to one group "Students"
Staff Block list - attached to "Teachers", "IT Staff", "Contractors", "Management", "All Staff"
Default - attached to the rest. Importantly, "School Name"

The student blocks work perfectly.

However, the staff blocks do not, for some reason staff accounts default to the default policy. How do I fix this?

[support200]

You can't make multiple policies applying at the same time. You have to pick your prefered policy. You can decide which policy applies by Priority Points. Higher points wins.

For your staff group having default policy, do you mean it gets reset to default policy by its own? If so, it means your staff group might have been deleted and reimported. Did you do something with the group on your DC?

[WTTG]

Hi. I didn't have the priority points set correctly. Thanks.