Apply Group Policy to OU but exclude certain computers?

[kennysarmy]

As the title really.

 

Is it possible to apply a Group Policy to an OU but exclude certain computers?

 

Regards

[spc-rocket]

Hi,

 

One way to do this would be to create a security group and add all items in that you want to apply the policy to and then security filter the GPO so it only targets the AD group rather than the default of OU.

 

Ash.

[localzuk]

The way you can do this is to add all the computers you *do* want it to apply to to a group, then on the policy, edit the security filtering section and add that group in there, and remove any other groups. That way only those computers will have it applied.

 

EDIT: Beaten to the punch.

[kennysarmy]

Hi,

 

One way to do this would be to create a security group and add all items in that you want to apply the policy to and then security filter the GPO so it only targets the AD group rather than the default of OU.

 

Ash.

 

Great thanks - will give it a go...

[kennysarmy]

The way you can do this is to add all the computers you *do* want it to apply to to a group, then on the policy, edit the security filtering section and add that group in there, and remove any other groups. That way only those computers will have it applied.

 

EDIT: Beaten to the punch.

 

close though

[Arcolite]

You could also use a WMI filter if there is something similar about the machines. There is a example on how to do this in the Windows 7 FAQ thread.