Security Guardian not picking up / classifying GPOs as Tier 0
说明
We have identified that some GPOs that are directly linked to the Default Domain Controllers container are not showing under Tier0. Some are, but some are missing.
解决办法
Defect ID: 480924 - Tier Zero provider does not recognize a gPLink value if the CN value in the attribute is recorded in a different case than the group policy CN attribute. ETA is first week of July.
Workaround there are two possible workarounds
In ADUC, Manually edit the 'F' in the gpLink attribute to lower case
In GPMC, Unlink\re-link the "Default Domain Controller" GPO from "Domain Controllers" OU.