Mastering Active Directory - Second Edition

Group Policy filtering

As we looked at earlier, a Group Policy can map to sites, domains, and OUs. If a Group Policy is mapped to the OU, by default, it will apply to any object under it. But within an OU, domain, or site, there are lots of objects. The security, system, or application settings requirements covered by group policies are not always applied to broader target groups. Group Policy filtering capabilities allow us to further narrow down the Group Policy targets to security groups or individual objects.

There are a few different ways to perform filtering in Group Policy:

• Security filtering
• WMI filtering