Re: Filter group policy

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: ptwilliams (ptw2001_at_hotmail.com)
Date: 07/28/04 

Date: Wed, 28 Jul 2004 21:11:02 +0100

Here's an article on how to filter a GPO:
 -- http://www.msresource.net/kb/gpoFiltering.html

If you want to exclude a group, deny that group Apply Policy. 

-- 
Paul Williams
_________________________________________
 http://www.msresource.net
Join us in our new forums!
  http://forums.msresource.net
_________________________________________
"Nelly" <anonymous@discussions.microsoft.com> wrote in message
news:5fe001c474dd$25e733c0$a401280a@phx.gbl...
Hi,
I would like to apply a GPO to all users - say at the
domain level.  Then, I would like to exclude a small
group of users, by putting them in a group, and filtering
on that group so that "Apply Policy" is unchecked.  Is
this possible?  For example:
1) GPO1 has "Authenticated Users" with the "Read"
and "Apply Policy" rights selected.  So every user will
get the GPO applied.
2) Create a group called "NoPolicy" and add my select
number of users to it that I dont want the GPO applied to.
3) Add the group to the security list of the GPO and
uncheck the "Apply Policy" right.  Thus, in theory, it
would exclude those users in the group.
I want to apply it authenticated users so that I dont
have to have a group with 5000 users in just to get a GPO
applied.  I would rather use the "natural" group of a
domain or OU to do this, and exclude the 10-15 users with
a group instead.
When I try this, it does not work.  So I think I already
know the answer to my question, but I thought I would ask
anyway.
Thanks
Nelly

Relevant Pages

  • Re: Exchange OWA 2003 Trusted Root Certificate
    ... understanding that I can "filter" a particular GPO from the Domain Level to ... statement on Chapter 4 - How Group Policy Works in the Windows 2000 Server ... > not filter computer configuration policy be user but you could for specific ...
    (microsoft.public.win2000.security)
  • RE: GPO settings are not applied
    ... Microsoft Windows XP Operating System Group Policy Result tool v2.0 ... GPO: Automatic_Updates ... GPO: Default Domain Policy ... Secure Proxy Server: N/A ...
    (microsoft.public.windows.server.active_directory)
  • Re: Set GPO for specific user group
    ... OK, now the new GPO is listed, but the ie homepage is still set to ... Microsoft Windows XP Operating System Group Policy Result too ... Small Business Server Domain Password Policy ... Filtering: Denied ...
    (microsoft.public.windows.server.sbs)
  • Re: Set GPO for specific user group
    ... Microsoft Windows XP Operating System Group Policy Result too ... Small Business Server Domain Password Policy ... Filtering: Denied ... Filtering: Disabled (GPO) ...
    (microsoft.public.windows.server.sbs)
  • Re: Move W2K3 server to its own OU seperate from SBS (MyBusiness) OU
    ... have a group policy that defines 'log on locally'. ... Small Business Server Remote Assistance Policy ... GPO: Default Domain Policy ... Computer Setting: 3 ...
    (microsoft.public.windows.server.sbs)