Preventing GP from being pushed down to a selective machine

Tech-Archive recommends: Speed Up your PC by fixing your registry




I have several machines that I need on my domain, but I need to prevent ALL
policies from being pushed down, including the default. Is there a way to do
this?

I made a different OU, moved the computers into them and made a new generic
policy, then linked it in GPMC and then went into the properties of the OU
and told it to not allow inheritance and to only allow my generic policy.
This still didn't seem to work.
.



Relevant Pages

  • Re: Aftermath of RDIRCMP.EXE?
    ... We are going to try creating a new OU, putting the machines in there, ... with Deny Read and Deny Apply Group Policy permissions on the Default Domain ... Ok, check the policy settings that you want (as I already said, some ... policies only work at domain level, ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to apply different Group Policies to different users on standalone Windows XP pro machine
    ... Deny access will trump any allow access ... allow only certain domain users or groups the ability to ... log on to only certain machines at certain times, ... You CAN specify individual policies for each domain user ...
    (microsoft.public.windowsxp.security_admin)
  • Policies not applying
    ... I am having problems getting policies applied to apply on my branch machines. ... I think the problem is slow link. ...
    (microsoft.public.win2000.group_policy)
  • Re: Local policy overriding domain policy
    ... So you say there are several machines that this is happening to, ... are processing group policies successfully regardless of which ones are ... Maybe these machines are not even receiving the proper policies in the ... the logs to see where the settings are/ or not applying. ...
    (microsoft.public.windows.group_policy)
  • Question about Group Policies in XP.
    ... I'm not an expert with group policies but would like to use it more. ... trying to set up five machines with a local group policy but have screwed up ...
    (microsoft.public.windowsxp.security_admin)