We use Microsoft Windows 2008 Server as our DCs, and use group policies to distribute access to network shares, software packages etc. Distribution of software packages is done throught LANDesk Desktop Manager.
The challenge is as follows: We have a policy called "Windows 7 free software", to which all users should have access. To achieve this, Domain Users, to which all users (naturally) belong, has been given access to the "Windows 7 free software" policy. This does not work.
I seem to remember that there is a known issue with Microsoft's implementation of LDAP, which causes permissions granted to Domain Users not to propagate properly, and wondered if anyone had any further details on this before I log a change request?