6.10. Restricting Group Membership with Group Policy
One of the best tricks in the book for a seasoned administrator who has had more than a couple issues with group membership not working properly with Group Policy is to use the power of restricted groups. Restricted groups are permissions lists that can be established within GPOs to determine who a GPO does and does not apply to.
The name itself can be a little confusing. At first, when you hear restricted group, you may think it's used as a filter that restricts users from doing something. And in truth, it does. But the easier way to think about restricted groups is that they are designed to choose who a policy does apply to, not who it does not. For instance, say you have a GPO you're creating ...
Get MCITP: Windows Server® 2008 Enterprise Administrator, Study Guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
