Tuesday 18 June 2013

Prevent a Group Policy from Applying to a Specific Group/User

In order to prevent a particular group policy from applying to a given user or security group, you'll need to make use of "Security Filtering" for the Group Policy.
  • In this case, a deny filter is needed.
  • Open up Group Policy Management Console
  • Drill down to where the Group Policy and highlight it
  • Switch to the Delegation tab of the GPO in the details window on the right hand side
  • Click on the Advanced button
  • Add the user account or security group you wish to be excluded from having the policy applied and, in the Permissions area, choose "Deny" for the permission "Apply Group Policy"
  • This user/group will now be excluded from this group policy

As a sidenote, if you want this change to take instant effect, you will need to either reboot the user's machine or open up the command prompt and enter "GPUpdate /Force" (without the quotation marks). Otherwise you will need to wait for the group policy to update of it's own valition which usually takes around 15 mins.

No comments:

Post a Comment