Solved

How to create AD group for Administrators that won't pick up Group Policy

Posted on 2009-07-01
4
301 Views
Last Modified: 2012-05-07
I'm using SBS 2008 and would like to create a group in the AD to put administrators into, that won't pick up and Group Policy settings when logging in. Essentially a group that is free from any group policy restrictions etc.

thanks
0
Comment
Question by:rowdybeans
  • 2
4 Comments
 

Expert Comment

by:HeadAche1
ID: 24752825
Simply putthe user  in its own OU then in Group policy management and right click on the OU and Block inheritance
0
 
LVL 5

Expert Comment

by:L0n3W0lf
ID: 24757186
Remove the right to apply the GPO. You can do that for every GPO you dont Want to applied to your admins
0
 
LVL 1

Author Comment

by:rowdybeans
ID: 24771526
I've moved the admin accounts to thier own OU. But I'm not sure what you mean by Block Inheritance?
0
 
LVL 5

Accepted Solution

by:
L0n3W0lf earned 500 total points
ID: 24778054
Start Group Policy Management
Select the OU you move the accounts -> right click and select Block Inheritance.
That should be all, but only if you don't use GPO with the No Override flag set, i think that cuts through this barrier.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now