Windows® Group Policy Administrators Pocket Consultant

Using Security Group Filters

You’ll often need to determine or control whether and how Group Policy applies to a particular security group, user, or computer. By default, GPOs apply to all users and computers in the container to which a particular GPO is linked.

Security Group Filtering

When you’ve delegated Group Policy management permissions to users or have administrators whose accounts are defined at the domain or OU level, you might not want a policy object to be applied to such accounts. For example, if you’ve delegated administrator privileges and Group Policy management permissions to Debby, you might want to enable her to install programs and perform other tasks that standard users cannot because of restrictions you’ve defined in Group ...