Policies are applied to GPOs, not groups, but you can (as you say) put the
group inside the GPO and then you can edit the DACL for the GPO (security
tab in its properties iirc) and choose which groups get the apply group
policy right assigned to them and which do not. This should do it.
Ask a Question
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.