[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 241
  • Last Modified:

Overriding spefic group policy item

Our primary domain group policy adds a certain groups to the local Administrators group on workstations. I would like to have the IT Dev staff computers add one extra group to the local admin group.
So I created a new GPO and added all the existing groups that need to be applied plus the new one. The problem is that the primary domain policy takes precedence and as a result my one specific change is not applied. I just want this one change to append to the primary GPO.

Is this possible or do I need to create a GPO specific for Dev team and deny the primary GPO from being applied to them? I would love to avoid that if possible.
  • 2
1 Solution
In you're primary domain group you add all of the groups you're talking about besides the IT_DEV-localadmin group. So, in the old situation, the IT_DEV group allready received all other groups right?

So, create a policy with one purpose and that is adding the IT-DEV group to the local admins. Connect this to the IT-DEV OU and it should work... No need to Re-add all the other groups if you ask me.
nataqAuthor Commented:
Yes the Primary domain GPO applies all the seeting they need, and since they are in IT they do not apply to any of the other GPO's

I tried just creatin a new GPO that only applied to DEV team mebers. THe only thing the policy was to do was add the DEV team secuity group to the local admins group. but that didnt work.
Create a new OU for the Dev staff.
Move their computers into it.
Link your GPO to that.

Make sure that you're using Restricted Groups correctly and working with the "this group is a member of" section or it will replace and enforce from the original GPO.

nataqAuthor Commented:

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now