Re: exclude a user or computer from Group Policy?

Thanks for clearing that up Brandy ...Learn something every day.

--
Henry Craven {SBS-MVP}
CI Information Technology
----------------------------------------------------
Melbourne SBS Users Group
http://groups.yahoo.com/group/melb-SBSusers/

""Brandy Nee [MSFT]"" <v-branee@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:BzpFXxLRFHA.3024@xxxxxxxxxxxxxxxxxxxxxxxx
> Hello Brad,
>
> Thank you for posting to the SBS Newsgroup.
>
> I understand that you want to prevent a particular user or computer
> for
> applying settings from a certain GPO. If I have misunderstood your
> concern,
> please let me know.
>
> Just as like Henry said, you can accomplish this by creating a new
> Organizational Unit if the GPO is linked at the OU level. However as I
> know, almost all the SBS GPOs are linked at the domain level so we
> cannot
> prevent them from applying to the users or computers by moving them to
> certain OUs. Actually we can do the following steps to prevent certain
> GPO
> from being applied to a user or computer:
>
> 1. Open Group Policy Management console, expand the forest, domain and
> then
> click the GPO that you do not want to apply to a user or computer.
>
> 2. In the Security Filtering list, remove "Authenticated Users", and
> place
> all the computer and user accounts that need the settings from the
> GPO.
> Thus the user or computer that is not in the list will not receive the
> settings.
>
> 3. Run "gpupdate" at a command prompt on the client computer that will
> not
> apply the settings.
>
> Hope this information helps. If there is anything unclear or you need
> any
> further assistance, I welcome you to post back.
>
> Best regards,
>
> Brandy Nee
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader
> so
> that others may learn and benefit from your issue.
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>


.

Relevant Pages

  • Re: SBS R2 WSUS
    ... settings GPOs, or are "parts" in all three? ... Les Connor [SBS MVP] ... Does R2 combine the group policy settings for WSUS with other settings ... or does it have its' own GPO? ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS R2 WSUS
    ... Does R2 combine the group policy settings for WSUS with other settings or ... does it have its' own GPO? ... as opposed to integrating with the SBS network. ... actually disabled the 3 GPOS controlling WSUS. ...
    (microsoft.public.windows.server.sbs)
  • Re: enforce IE default homepage
    ... GPO or login script? ... Kevin has covered the GPO route, and the SBS Client Deployment tools can be set to push out IE settings on every logon too. ...
    (microsoft.public.windows.server.sbs)
  • Re: Cant access Group policy
    ... > domain controller policy. ... modify settings that are controlled by those policies, create a new GPO ... (Disabling SMB Signing on SBS 2003). ...
    (microsoft.public.windows.server.sbs)
  • Re: Loopback processing, roaming profiles, folder redirection for domain-member laptops
    ... I suggest not mixing Computer Settings and User Settings in the same GPO - this restricts your flexibility and can be confusing ... if you put the laptops' user accounts into a seperate OU from the desktops, then you can use loopback processing to apply different User Configuration settings to the laptops and desktops if you also seperate out the settings you want to be different into seperate GPOs ... User Configuration, Network, Offline Files, "Do not automatically make redirected folders available offline" prevents that from happening BEFORE redirecting any folders - its not retro active. ...
    (microsoft.public.windows.group_policy)