Home | Troubleshooting |  Quick Setup  |  Cisco How to  |  Data Recovery  |  Forums   | Blog | IT Exam Practice | Services  | About Us | Chicagotech MVP  | Search  | Contact Us  |               Select a Topic VPN How To Network How To Remote Access How To Windows How To Internet How To New Topics    Laptop for rent: $35 per day plus $10 for additional day

In most cases, if you create a group policy to apply only to specific accounts (either user accounts, machine accounts, or both), you can accomplish this by placing the accounts in an organizational unit, and then applying a group policy at that organizational unit level. However, in other cases, there may be situations in which you want to apply a group policy to an entire domain, for example SBS client policy, but you may not want those policy settings to also apply to administrator accounts or other specific users or groups. You can set Deny permission in the Apply Group. To do that, please follow these steps:

1. Open the GPO.
2. Click the group policy object that you do not want to apply to administrators. By default, the only policy that is listed in the window is the Default Domain Policy.
3. Click Properties, and then click the Security tab. If the group or user to which you do not want policies to apply does not appear in the list, use the following procedure:
   1. Click the Add button.
   0. Click the domain in which the account resides.
   0. Find the account, and then click it in the list.
   0. Click the Add button, and then click OK.
   0. Proceed with the remaining steps.
4. Click the administrators group (or other group or user) to which you do not want the policy to apply.
5. In the Permissions windows, click to select the Deny check box for the Apply Group Policy permission. This prevents the group policy object from being accessed and applied to the selected group or user account.

Post your questions, comments, feedbacks and suggestions

Contact a consultant

Related Topics