Hi,
If I deny netlogons to the DC for Domain Admins, would the GPOs get depolyed successfully?
I mean, I have some policies specified for domain admins, and looks like this would stop these people from reading the GPOs / scripts directly.
Would it this be a problem? Or which user account is used to retrieve user policies when a user logon?