how best to override/block a GPO just for a single user

[mrstrong]

Hi,

 

I've linked a GPO to a "top level" Users OU.

Under here are other OU's e.g. staff, pupils etc

The GPO is to set internet proxy via registry

(FYI: the GPO is a based on Michael's post #23 http://www.edugeek.net/forums/windows-7/110567-ie10-proxy-setting-windows-7-a-2.html

 

Now I want to override this just for one user in a lower down OU (which has other users in it who I want to keep the current proxy setting).

E.g. I can log on as this user and set their proxy manually in IE but after a GP refresh it reverts back to the GPO setting.

If it makes any difference, at a later date I may want all users in the lower down OU to have the new proxy setting.

 

Whats the best way to sort this.

Thanks

[Vasriel]

The way to do it is to setup a policy to set the settings you want and set the Security Filtering so it only runs for the specific user.

 

On the OU the policy is applied too you want to change the Link Order in which group policy is applied so that the new policy is applied after your main policy.

[mrstrong]

Ok sounds a good plan. When you say security filtering I guess you mean in the GPMC?

ie remove authenticated users and just add another group with my user in ?

[Vasriel]

Yeah thats what I meant, remove authenticated users and add the user account or a group.