Solved

How to create AD group for Administrators that won't pick up Group Policy

Posted on 2009-07-01
4
305 Views
Last Modified: 2012-05-07
I'm using SBS 2008 and would like to create a group in the AD to put administrators into, that won't pick up and Group Policy settings when logging in. Essentially a group that is free from any group policy restrictions etc.

thanks
0
Comment
Question by:rowdybeans
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 

Expert Comment

by:HeadAche1
ID: 24752825
Simply putthe user  in its own OU then in Group policy management and right click on the OU and Block inheritance
0
 
LVL 5

Expert Comment

by:L0n3W0lf
ID: 24757186
Remove the right to apply the GPO. You can do that for every GPO you dont Want to applied to your admins
0
 
LVL 1

Author Comment

by:rowdybeans
ID: 24771526
I've moved the admin accounts to thier own OU. But I'm not sure what you mean by Block Inheritance?
0
 
LVL 5

Accepted Solution

by:
L0n3W0lf earned 500 total points
ID: 24778054
Start Group Policy Management
Select the OU you move the accounts -> right click and select Block Inheritance.
That should be all, but only if you don't use GPO with the No Override flag set, i think that cuts through this barrier.
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question