Filtering of GPO in Computer Config- how to?

[Zagori]

I created an OU and I applied a Policy for computer
configuration. The policy is working fine !
However I come to the point that I only want to apply it
to some selected computers in that OU and not for all.

How can i do filtering in that sense. I checked and it
applied to Authenticated users by default. Can I remove
the Authenticated users and come whith a group called
PC_group put all computers that I want in that group and
apply the policy..

Is it the best way of doing it?

 

[Marin Marinov]

I created an OU and I applied a Policy for computer
configuration. The policy is working fine !
However I come to the point that I only want to apply it
to some selected computers in that OU and not for all.

How can i do filtering in that sense. I checked and it
applied to Authenticated users by default. Can I remove
the Authenticated users and come whith a group called
PC_group put all computers that I want in that group and
apply the policy..

Is it the best way of doing it?

Hi Zagori,
Refer to the below link that explains in detail how to do GP filtering.
You'll have to create a global group, put the respective computer
accounts in it, and deny it the "Apply group policy" and "Read"
permissions on the GPO. You don't need to remove Authenticated Users
since Deny entries take precedence over allow. (URL wraps):

http://www.microsoft.com/windows2000/en/advanced/help/default.asp?
url=/windows2000/en/advanced/help/filter.htm

HTH
--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.

"True knowledge exists in knowing that you know nothing."
Socrates