Deny GPO to a Global Security Group via GPMC

Posted on 2005-04-21
Last Modified: 2012-06-22
I have a GPO at the domain level and I do not want the GPO to be applied to a specific global security group. Is it as simple as going into GPMC, clicking the delegation tab, then adding the global security group, then advanced and finally selecting "Deny Group Policy?"

Question by:Govnah
    LVL 8

    Expert Comment

    yes, jsut dont add the group there

    if domain users group is there remove it, and add groups that you want in there

    all users are members of domain users, if thats there it will be aplyed to everyone
    LVL 2

    Accepted Solution

    Group policy can only be applied if you can read the policy so add the group in the delegation tab that you dont want to have the policy applied in to and edit the properties and then deny read to that. Dont know why you would want to remove domain users from a policy at the root of the domain though it creates more work for you specially if you just want to exclude one group.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Occasionally Windows/Microsoft Updates will fail to update. We have found a code that will delete all temporary files and re-register all dll's related to Windows/Microsoft Updates! This works 99% of the time to get the updates working again! The…
    As the title indicates, I have done this before. It chills me everytime I update the OS on my phone, ( because one time I did this and I essentially had a bricked …
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now