How to exclude a user or computer from getting a group policy applied

Learn how to exclude specific users users, computers, or security groups from applying specific group policy objects. In this example, I show you how to create a security group within Active Directory, and then used the advanced permissions options with the delegation tab of a group policy object to stop that group policy being applied to users and computers that are a member of the security group.

[rapperleox]

As an AD server administrator for the company. I really thank you very much for your extremely useful videos. Hope you will continue to release more videos. Thank you very much!!! ❤❤❤

[jaoh]

Thank you, this helped with my group policy in my home labs. Subscribed and will go through other videos on related topics.

[ItzanRosarioMoya]

Amazing videos, thanks. One question if take a pc out form a domain, the poli6still apply

[andrewenglish]

Just as I realized I set the domain password policy to affect all accounts including my service accounts I saw this video! 😁 Thanks for saving my ass!

[ItzanRosarioMoya]

Thanks, really good! One question, if a pc is taken out of a domain, wil the police stil apply

[ItzanRosarioMoya]

Thanks, really good! One question, if a pc is taken out of a domain, will the p

[bzavala]

So I'm confused, at 1:50 you are in the "Lockdown Settings" GPO, then you go into Delegation and say select add and search for "your GPO", but you then enter "Deny-GPO-workstations security"?? Wouldn't that be a security group and not a GPO?

[teunb]

Hey Danny, at 1:46 you tap the Advanced button. This button doesn't seem to be there for me. I only see Add, Remove and Properties (properties doesn't do the same as advanced). Any idea? I'm using Windows Server 2016

[DanielFridmancarpediem]

Thanks Danny; One question; I started to deploy Win11 on new computers there is a sign-in issue in>Network & Internet> Ethernet that I have to sign in/pass to get the DOMAIN; and because of this- most new computers are not receiving GPO ; do we have something to do with it before I downgrade all win11 machines to win10 ?

[game-hardware]

Do the authenticated users still get the group policy? Because the authenticated users are added in the security settings of the newly created security group ?

[KawaljeetSingh-gk]

i created a GPO with "block control Panel" and made changes advanced configuration and have added "PC02" in it and maked it to deny GPO and then applied the "block control panel" to users OU. Now, i am logged into both pc01, pc02 with same username and its control panel is getting blocked for both device, please advise

[أكلاتلذيذه-زت]

hello sir

i have 2 questions plz.

1- how to delete software GPO after we have finished deploying an app via this gpo??

deleting the gpo object will delete the app from all computers. and if we just go to remove (allow users to continue use the software, but prevent new installation )option and THEN delete this gpo object, then also apps will get deleted from all computers. i don't want too many software setting GPOs in my AD.


2- how to create local admin account in 1 go to all computers from AD?? no.. (add local admin GPO) is not what i mean :(

see... sometimes i should login to the computer locally with an admin account user to fix the technical issue. but for my surprise, i cant log in via biult in administrator account due to many reasons. so I prefer to add another local user and give it admin privileges to use it in times of need. so how to create this account???