Solved

Setting group policy to just one computer

Posted on 2010-09-01
10
359 Views
Last Modified: 2012-05-10
Is it possilbe to assign a group policy to just one computer within an OU with several other PCs in there?

This one PC needs to have the windows firewall DISABLED as it is blocking services required for an application even with all the correct exceptions in place.

0
Comment
Question by:MSSC_support
  • 3
  • 3
  • 2
  • +2
10 Comments
 
LVL 32

Expert Comment

by:PowerEdgeTech
ID: 33577341
You could move the computer to a new OU, then, based on the existing GPO, you could create a new GPO, then change it.
0
 
LVL 10

Accepted Solution

by:
scriven_j earned 400 total points
ID: 33577342
No, but you can achieve this by creating a sub-OU within the OU that the computers are in and then apply a specific Group Policy for the firewall changes.
This will mean that the computer gets all the policies on the parent OU, but the firewall policy will override anything higher up.
 
0
 
LVL 10

Expert Comment

by:scriven_j
ID: 33577390
Of course, what PowerEdgeTech has said is also true, but if you do it my way, then subsequent group policy changes will not need to be duplicated over 2 OU's.
0
DevOps Toolchain Recommendations

Read this Gartner Research Note and discover how your IT organization can automate and optimize DevOps processes using a toolchain architecture.

 
LVL 5

Assisted Solution

by:MrN1c3
MrN1c3 earned 100 total points
ID: 33577524
You can assign a GPO to just one machine.

Link the GPO to the relevant OU as normal.  On the "scope" tab, amend the "security filtering".  Remove any entries from sec filtering, then simply add the hostname of the PC.
0
 
LVL 2

Expert Comment

by:esafdia
ID: 33577694
MrN1C3 is Correct, It's not best practices but that method does work.
0
 
LVL 10

Expert Comment

by:scriven_j
ID: 33577854
So does mine!  What is best practise then?
0
 
LVL 2

Expert Comment

by:esafdia
ID: 33577926
Best practise is to put it in a seperate OU.
0
 
LVL 5

Expert Comment

by:MrN1c3
ID: 33577989
MSSC - My post above answers your question, you can actualy assign a GPO to a single computer.

scriven_j has posted what I would consider best practice, and exactly how you should approach this.
0
 
LVL 2

Expert Comment

by:esafdia
ID: 33578092
Agreed on both counts.
0
 

Author Closing Comment

by:MSSC_support
ID: 33609706
I think adding it to a sub OU would be better than assigning it to the individual as if i need to add any more computers to the rule I will just place it in the OU.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Why pdf file doesn't open ? 7 65
Lot of troubles with windows 10 7 51
paging file usage  > 95% for 30 min about 12 26
"Recent" shortcut button missing in Windows 10 7 36
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
An article on effective troubleshooting
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now