asked on

Group Policies

I have set group policies for all computers within my domain, on my domain controller in active directory. I now want to take away group policies for one of the PCs. What is the best way for me to eliminate group policies on a PC that is getting it from the server/domain controller?
Reason is that I set one of the group polices to hide the C: drive on all the PCs. The problem is that one of our PCs, I have loaded software on it locally. In order for those users to use the program(locally installed), they will need access to the C: drive.
I tried to share the C: drive(under current policies), tried to create a shortcut(didnt work), and so on. I cannot load it on the Server, because it is a program that doesnt have the capabillities to map a drive to it.(I dont know why).

Any suggestions great wizards of the IT World?!?!

ASKER CERTIFIED SOLUTION

jose_ramirez

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

col_forbin13

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

lyle-granger

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Beldoran

A quick fix may be to go to the security tab in the policy that you want to remove from a particular PC.
Add that PC and click Deny. That machine then will not get that policy.

This can be used where you have applied policy to 'domain computers' and need to remove one in particular.

Beware, Deny permissions can be dangerous if used too much, as they will take precedence over all else.

Good luck

tonyteri

Simple:

Move the computer to a new ou, that is not affected by the GPO.

SOLUTION

Beldoran

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial