lanman777
asked on
Move a user to a new OU and block the GPO of the OU so it is not applied to the user move Windows 2008 Active Directory
I want to move a user to a new OU but want to block the GPO that is applied to the OU on this one user. How do I block an OU's GPO from being applied to a single user in the OU?
You'll have to create an OU inside of that one to do this. Then create a new policy for the sub-OU and check the box to "block policy inheritance".
-mitch
-mitch
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
You can also make use of WMI filtering similar to "thomasd04" suggestion.
Security and WMI filtering can provide a good granularity of targeting Group Policies
To do this with WMI filtering
Group Policy Management console - go to WMI filters
Create a filter and Edit it
SELECT * FROM Win32_UserAccount where FullName <> "YourUserName"
Then apply this filter to your relevant Group policy
The Group Policy will be applied to everyone in the OU that is not "YourUserName"
cheers
Mark S
Security and WMI filtering can provide a good granularity of targeting Group Policies
To do this with WMI filtering
Group Policy Management console - go to WMI filters
Create a filter and Edit it
SELECT * FROM Win32_UserAccount where FullName <> "YourUserName"
Then apply this filter to your relevant Group policy
The Group Policy will be applied to everyone in the OU that is not "YourUserName"
cheers
Mark S
Hope this helps.