Applying a GPO to only selected machines, not all the machines.

I am applying a GPO to a workstations OU in one location, the GPO is being applied to all the machines located in that OU folder, is there a way to apply the GPO to 90% of the machines but to prevent it from being applied to a select few machines?

Basically there are a few machines which I can't apply the GPO to, the settings would make the machines not work well.

Thanks.
bbaracAsked:
Who is Participating?
 
LauraEHunterMVPConnect With a Mentor Commented:
You can use security group filtering. Create a security group containing the computer objects that should not receive the GPO settings, then DENY both "Read" and "Apply Group Policy" to that group for the GPO in question.

Use the following tutorial as a step-by-step through this process: http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Security-Filtering.html

Hope this helps.

Laura E. Hunter - Microsoft MVP: Windows Server - Networking
0
All Courses

From novice to tech pro — start learning today.