She closes the editor. Back in GPMC, she right-clicks the GPO and selects Enforced – because the OU containing the Traders has a conflicting WMI filter that might block inheritance.
Lena leans back in her chair. The London desk’s first login is in 20 minutes. The logs show no more 0x80070005. group policy edit
Then she closes her laptop, crawls into bed, and dreams of ActiveX controls burning in a digital fire. She closes the editor
The 2:00 AM GPO
She’s so tired. Her cursor hovers over OK . But she notices something awful: the drop-down at the top of the Internet Properties window says “Internet Zone” – not Trusted Sites. The London desk’s first login is in 20 minutes
She writes in her post-mortem note: “Root cause: Compliance did not test GPO in a ring. Fix: Applied targeted preference item with item-level filtering. Lesson: Never edit a GPO at 2 AM without a second set of eyes.”
But there’s a trap: Preference items don’t apply unless the target GPO’s “Enforce” flag is set or the “Item-level targeting” is correct. She clicks the tab, checks “Apply once and do not reapply” (to avoid overwriting future changes), and adds a targeting rule: “Operating System matches Windows 10 AND User is in OU=Traders.”