Solved

setup exception for users or workstations not receive a group policy.

Posted on 2014-12-03
1
56 Views
Last Modified: 2014-12-16
I have a GPO that deploy a screensaver settings.  The changes are made under User configuration but I enable User Group Policy loopback processing so I can apply to group of workstations as well.

Question, if I want to configure so that a particular user or machine do not get this GPO, do I do this from "delegation" or from "security filtering" of the GPO?

Please advise the exact steps?

We use Windows 2008 servers.  

Many thanks.
0
Comment
Question by:nav2567
1 Comment
 
LVL 54

Accepted Solution

by:
McKnife earned 500 total points
ID: 40479657
Use security filtering.
Instead of "authenticated users", which you should remove, you will create and insert the group screensaver which holds all users that should get it into that policies' ACL. Give that group the right to read and apply the policy, that's it.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question