Using IPSec Filter to block Internet Access does not work from GPO (but works fine as part of local security policy)
I've already tried that. I manually synced the domain to make sure all DC's
had the new GPO, then rebooted the test system. I then tried stopping and
restarting the policyagent. I even left the maching running for half a day
to see if there would be a difference after the 180 minute refresh. Nothing
changed. It receives the policy from the domain, but the contents of the
policy are not being applied.
|