JSI Tip 4695. How do I prevent domain group policies from applying to selected accounts or groups?

To prevent a group policy from applying to everyone in the container:

01. Open the Active Directory Users and Computers snap-in.

02. Right-click the container to which the policy is applied and press Properties.

03. Select the Group Policy tab.

04. Highlight the group policy object. You may have to Add it first.

05. Press Properties.

06. Select the Security tab.

07. Select or Add the accounts or groups to which the policy should NOT be applied and check the Deny box for the Apply Group Policy permission.

08. Press Apply and OK.

NOTE: See tip 2492 » How do I 'filter' Local Group Policy?

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.