Mastering Active Directory

Group Policy filtering

As you learned earlier, Group Policy can map to sites, domains, and OUs. If Group Policy is mapped to the OU, by default, it will apply to any object under it. But within an OU, domain, or site, there are lots of objects. The security, system, or application settings' requirements covered by group policies not always applied to broader target groups. Group Policy filtering capabilities allow you to further narrow down the Group Policy target to security groups or individual objects.

There are a few different ways in which we can do the filtering in Group Policy:

• Security filtering
• WMI filtering