Link to home
Start Free TrialLog in
Avatar of lanman777
lanman777

asked on

Move a user to a new OU and block the GPO of the OU so it is not applied to the user move Windows 2008 Active Directory

I want to move a user to a new OU but want to block the GPO that is applied to the OU on this one user. How do I block an OU's GPO from being applied to a single user in the OU?
Avatar of TAWpower
TAWpower
Flag of United States of America image

You would have to create a different OU for that user. You cannot block on a user just an OU. This is in keeping with best practices for GPOs.

Hope this helps.
Avatar of mnation1
mnation1

You'll have to create an OU inside of that one to do this.  Then create a new policy for the sub-OU and check the box to "block policy inheritance".

-mitch
ASKER CERTIFIED SOLUTION
Avatar of thomasd04
thomasd04
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
You can also make use of WMI filtering similar to "thomasd04" suggestion.

Security and WMI filtering can provide a good granularity of targeting Group Policies

To do this with WMI filtering
Group Policy Management console - go to WMI filters
Create a filter and Edit it

   SELECT * FROM Win32_UserAccount where FullName <> "YourUserName"

Then apply this filter to your relevant Group policy

The Group Policy will be applied to everyone in the OU that is not "YourUserName"

cheers
Mark S