How to Exclude a User from Windows AD Group Policy Object (GPO)
We will learn how to easily exclude a specific user or group of users from a group policy object (GPO).
When you apply a GPO to an OU it applies to all of the objects in that OU (users or computers). There are times when you need to exclude specific users from a GPO such as your admin users.
The best method to exclude users from a GPO is by creating a group and using the GPO delegation settings to deny access to the GPO.
we are going to Apply Setting on User - Limits Control Panel Items
Steps
1. Create Separate Group (i.e GPO Deny Limit Control Panel Items)
2. Add Members you want to Exclude from this policy
3. GPM- GPO Select the GPO
4. Delegation tab.
5. Click on Advance and add Group (i.e GPO Deny Limit Control Panel Items)
6. Permissions:
read : Allow -checked
Apply Group policy : Deny-checked
rest all keep unchecked.
Apply Ok
7. Test policy by login with assigned user
8. done.
Watch video How to Exclude a User from Windows AD Group Policy Object (GPO) online without registration, duration hours minute second in high quality. This video was added by user Quick-IT 18 September 2023, don't forget to share it with your friends and acquaintances, it has been viewed on our site 762 once and liked it like people.