Don't want to apply a GPO to certain group members

[ee99ee]

I've got a bunch of computers under an OU which I need to apply a GPO
to. A few of the computers in this OU are members of a group which
others are not. I want to apply a GPO to all the computers in this OU
except those computers which are members are that group.

So, how can I apply a GPO to an OU of all computers except to
computers which are a member of a specific group?

-ee99ee

 

[Laura E. Hunter \(MVP\)]

You can filter the scope of a Group Policy object using membership in
security groups, as well as through WMI filtering.

http://msdn.microsoft.com/library/d...olicy/policy/filtering_the_scope_of_a_gpo.asp

 

[Bobby]

You could temporarily move the computers that you don't want receiving the
GPO to a sub or child OU and use the block inheritance setting to stop the
parent GPO settings from being applied to this sub OU. Or I suppose you
could "deny" the group of computers(are they in their own security group?)
"apply group policy" permission on the GPO in question.


Regards,


BT