We help IT Professionals succeed at work.

Denying a GPO to a certain group

Last Modified: 2010-03-17
Hi Guys

We are running Windows 2003 DC's.

Quick couple of questions on GPO's;

a) There is a setting to 'Enforce' GPO's - at the moment, this is set to NO, but I notice the GPO is still applied. What does Enforce actually mean?

b) Is there anyway to see the GPO result on the machine itself (as opposed to using the GPMT)

c) Let's say I have User A in Security Group A and Security Group B. There is a setting to hide the Control Panel that is applied to Sec Group A, but this setting is also Denied to Sec Group B. What is the net result for the user, assuming the setting is configured iwithin the same GPO?

d) Using Restricted Groups - let's say I use Restricted Groups to control who is member of the local Administrators group on a group of machines. Am I correct in thinking that if wanted to add someone to this group, I need to add their account to one of the Restricted groups or add the group to the Restricted Groups list? There is no other way around this?

Hope someone can help!

Watch Question


a) http://grouppolicy.editme.com/EnforceBlock
b) gpresult /v - its a plain text output. In XP you can use the Help center to get a HTML page

c) Deny should win

This one is on us!
(Get your first solution completely free - no credit card required)
This one is on us!
(Get your first solution completely free - no credit card required)

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.