For some reason I always kept unticking the "read", as some articles keep suggesting that. This worked, thank you. As an FYI, I had to first disable the linked GPO to the OU to get the affected devices and users to be removed from the GPO after which it worked as intended. The GPO kept sticking around with just the changes mentioned.
My question is can I deny one specific portion of the GPO from applying but keep the rest for one user/computer. There is one security option I want disabled but the rest to apply.
Hello Sir, can we do the same if we want to exclude a security group (containing service accounts) to be excluded from the default domain policy GPO? Kindly confirm if this is supported action and do attach any reference article from Microsoft. Thank you a lot!!!!
I have a strange situation that I was hoping anyone can resolve. This method works great the first time around, but when I add another user to the GPO Exclusions group that is now in the Delgations tab, it doesn't apply to that user even with a "gpupdate /force" already applied to it. Is there something I'm missing? Do I have to create another GPO Exclusions group for another user or can I use the same GPO exclusion that was created here and just adding another user to that group? I did that but it doesn't work but ironically DOES work for the first user that I had created. Any help is greatly appreciated. Thank you.
1. After you add another user it stops working for both users or just the recently added user? 2. What do you see when you run gpresult /r Do you see GPO listed under "The following GPOs were not applied because they were filtered out"?
@@ActiveDirectoryPro Hello there, thanks for replying back. 1. It only doesn't work for the newly created user, the other user remains unaffected and works just fine. But the exclusion will not work for the second user. 2. Under the option where it says: "The following GPOs were not applied because they were filtered out" it says: " Local Group Policy Filtering: Not Applied (Empty)" Using these VMs in hyper-v by the way.
For some reason I always kept unticking the "read", as some articles keep suggesting that. This worked, thank you.
As an FYI, I had to first disable the linked GPO to the OU to get the affected devices and users to be removed from the GPO after which it worked as intended. The GPO kept sticking around with just the changes mentioned.
How do you apply a specific GPO to only to a specific group and not for the rest of the domain users?
While excluding account unknown all my users showing like that why even I Crete new user also
My question is can I deny one specific portion of the GPO from applying but keep the rest for one user/computer. There is one security option I want disabled but the rest to apply.
There is no way to deny a portion of a GPO. You would need to create a separate GPO that disabled the security option.
thank you
You're welcome
Thanks
Welcome
Hello Sir, can we do the same if we want to exclude a security group (containing service accounts) to be excluded from the default domain policy GPO? Kindly confirm if this is supported action and do attach any reference article from Microsoft. Thank you a lot!!!!
i have the same question
The video demonstrated excluding a security group.
I have a strange situation that I was hoping anyone can resolve. This method works great the first time around, but when I add another user to the GPO Exclusions group that is now in the Delgations tab, it doesn't apply to that user even with a "gpupdate /force" already applied to it. Is there something I'm missing? Do I have to create another GPO Exclusions group for another user or can I use the same GPO exclusion that was created here and just adding another user to that group? I did that but it doesn't work but ironically DOES work for the first user that I had created. Any help is greatly appreciated. Thank you.
1. After you add another user it stops working for both users or just the recently added user?
2. What do you see when you run gpresult /r
Do you see GPO listed under "The following GPOs were not applied because they were filtered out"?
@@ActiveDirectoryPro Hello there, thanks for replying back.
1. It only doesn't work for the newly created user, the other user remains unaffected and works just fine. But the exclusion will not work for the second user.
2. Under the option where it says: "The following GPOs were not applied because they were filtered out" it says: " Local Group Policy Filtering: Not Applied (Empty)" Using these VMs in hyper-v by the way.