Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2073
  • Last Modified:

Any way that we can assign a Group policy for specific machines or users.

Hi,

Any way that we can assign a Group policy for specific machines or users.Not by putting them in a seperate OU and other way to choose the computers or users individually?

Regards
Sharath
0
bsharath
Asked:
bsharath
4 Solutions
 
jimstarCommented:
I believe you can create a security group, add the machines/users to that group, and then specify a group policy for that security group.
0
 
BarcaCommented:
try gpmc.

you can easily assign permission that which user/usergroup membership can read/apply to the policy
0
 
KCTSCommented:
It would be much easier if you could put all the users and computers that you want to apply the policy to in an OU of their own (or a subOU nested inside an existing OU if that was more appropriate and then link the GPO to the OU.

You can use group policy filtering, which is where you apply a group policy to and an object (such as the domain) and then prevent some users/computer applying the policy by restricting the permissions to read and apply the policy. This tends to get a bit messy though so avoid it if you can. see http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Security-Filtering.html
0
 
tigermattCommented:
You would be much better off making your computers a member of a particular OU which has all the GPOs applied as necessary. This is much better and neater than assigning GPOs to individual computers, which is likely going to increase your startup and login times, since there would be many more GPOs to evaluate.

If your reasoning behind not moving machines between OU is because you can't as your OU structure is already set up, then your best option would be to make the machines the GPO should apply to a member of a new security group, which you then filter the GPO object to as KCTS has said.

-tigermatt
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now