RE: exclude laptop from a gpo

When I made my group policy for the Internet Explorer I have the the scope
set for Authenciate Users and Domain Users. When the laptop logs in on the
network the IE GPO policy is still being applied.

Do I need to change the deleligation or scope? It is set to Authenciate
Users and Domain Users

I did mark the SBSLaptops not to inherit.

Thanks

JJ

""Jacky Luo [MSFT]"" wrote:

Hi JJ,

Thanks for posting here.

From the description, I understand the issue is that you want to exclude
the laptops to apply the GPO. If I am off base, please don't hesitate to
let me know.

Let us refer to the following steps to troubleshoot the issue:

In this case,I suggest you to use block inheritance on the SBSLaptops OU,to
do so:

1.run gpmc.msc to open group policy management

2.expand to Domain.local/My
Business/computers/SBSComputers/SBSLaptops,right click and click block
inheritance.

the PCs in the SBSComputers can inherit and apply the GPO on the domain
level

So the laptops will not apply the GPO because it has been blocked.

Furthermore,you can put the Group Policy link on the domain level.


Hope this helps

I appreciate your time. I am happy to be of assistance and look forward to
your reply.

Have a nice day!

Best regards,

Jacky Luo (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
====================================================
PLEASE NOTE: The partner managed newsgroups are provided to
assist with break/fix issues and simple how to questions.
We also love to hear your product feedback! Let us know what you think by
posting

from the web interface: Partner Feedback
from your newsreader: microsoft.private.directaccess.partnerfeedback.

We look forward to hearing from you!
====================================================
When responding to posts, please "Reply to Group" via your newsreader
so that others may learn and benefit from this issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
====================================================


.

Relevant Pages

  • Re: adding a group to local computer
    ... It happens regardless of which group I add. ... As far as group policy, I was looking through the group policy settings last ... why must all your domain users be local admin? ...
    (microsoft.public.windows.server.active_directory)
  • Re: OU level
    ... Do you have to be a member of domain users in order to ... the new ou which I setup a group policy. ... for users and the old users have the same group policy. ...
    (microsoft.public.win2000.active_directory)
  • Group Policy Application
    ... I have locked down the Terminal Services Desktop using Group Policy. ... only problem is that some users have laptops and the Group Policy is too ... Is there a way I can have these settings apply when they are connecting to ...
    (microsoft.public.windows.group_policy)
  • Group Policy Issue - I Think
    ... I have a 2003 server domain with xp clients in the domain users group that ... view all the https sites with no problem but then back as a domain user and ... I think this might be a group policy issue but i am not sure. ...
    (microsoft.public.windows.server.active_directory)
  • GPO depending on PC being logged on
    ... in our Win2K-domain I want to set up a group policy to a subset to my users ... their IE, except when they log on theier laptops, since they use it in other ... changes in proxy settings", thus allowing the users to change the proxy ... However the GPO is not applied to the users. ...
    (microsoft.public.win2000.group_policy)