Windows Forum

Ask something
Discussion Locked

GP to everyone except on certain machine

0 helpful
5 replies

by btrue

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I need a little help with group policies. I have all users and computers in the same OU. I have different groups such as Admin, Faculty, and Students. I have a group prolicy created on the server for the Students group. Everything there works great. The policy is only applied to that group.

I would like to be able to specify certain computers for that policy not to apply to. We have one computer lab where the students need to have no group policy specified, or possibly a different group policy if that's possible. I've tried just saying Students Group and checking read and Apply Group Policy. Then I've added a machine that I don't want the policy applied to and saying Deny Group Policy. This isn't working though. The Policy is still being applied. I thought all Deny permissions were supposed to take priority.

Any help or suggestions would be appreciated. Thanks!

5 replies

by voldar

The simplest way to solve the problem is to create a new OU and to take the "students" that you want to be subjected to other policies from the STUDENTS OU and transfer them into the new one. Take care also to remove them from the STUDENTS group (ifyou have one).

by btrue

I'm not exactly sure what your saying. I still need all students to be part of the Students group. All Students also still need the default Student Group Policy applied to them when they login to a machine anywhere else in the building. I just have this one lab the I don't want the policy to apply to.

by michele_lundquist

try user group policy loopback processing mode in the computer lab OU under administrative templates>system>group policy

This discussion is closed to new replies.