Excluding a specific machine from Group Policy - Server Essentials 2012

Question

Server OS: Server Essentials 2012 Client OS Windows 8.1

I have a domain set up using SE 2012 and have used the group Policy wizard to apply Folder Redirection and "Security Settings".

Can I make an exception for a specific machine so that Folder Redirection and Windows Update settings are not applied for that machine.

score 5 · Answer 1 · edited Jul 07 '21 at 17:29

5

You can use the Delegation-tab of the policy you want to exclude and add the computer you do not want to apply the policy to, to the list. Select the server on the Delegation tab, click the 'Advanced' button, and set the 'Apply Group Policy' setting to 'Deny'. Now, this server is excluded from this policy without moving it or blocking inheritance.

edited Jul 07 '21 at 17:29

HenricF

103
3

answered Nov 22 '16 at 12:18

Pjotr Giling

51
1
2

score 1 · Accepted Answer · answered Jul 21 '14 at 13:46

1

Yes. There a few basic approaches to his problem.

Organization Units (OUs)
- You can use OUs to control which computers get which policies, either by linking different group policies to different OUs, or by blocking inheritance in some OUs.
Filtering
- You can use either WMI filtering or Security Filtering to force GPOs to apply or not apply to given computer and/or user object(s).
Group Policy Precedence
- Not all group policy objects have the same precedence. You can use this to have a desired group policy effectively overrule an undesired one.

answered Jul 21 '14 at 13:46

HopelessN00b

53,385
32
133
208

Filtering sounds like the easiet. Is there a walkthrough for "a-developer-who-fancies-himself-as-a-domain--admin" :-) – Pat Long - Munkii Yebee Jul 21 '14 at 14:03
@PatLong-MunkiiYebee [Here's a Link to a basic walk-through on WMI filtering for OSes on technet](http://blogs.technet.com/b/askds/archive/2008/09/11/fun-with-wmi-filters-in-group-policy.aspx). Security filtering's pretty straightforward, but there's no easy way to do a simple `NOT` with security filtering. So, I'd stick with the WMI filter - decide how you want to filter out your specific machine (OS, hostname, hardware, whatever), write your query (not sure you'll need help, as a dev, but Google is very helpful for most WMI queries), and apply that query to your GPO. – HopelessN00b Jul 21 '14 at 14:21
+1 WMI filtering worked for me in Server 2003. – Jay Riggs Jan 07 '15 at 22:16

score 0 · Answer 3 · answered Jul 21 '14 at 09:04

0

You apply group policy through the organizational unit (OU) in active directories. for example, a OU called computers has the policies you need. To exclude a computer from the policies, move it out of the OU called computers.

answered Jul 21 '14 at 09:04

Glen

211
1
3

I have Server Essentials 2012. Do I used gpedit? I did have a look but could not see how to exclude the computer – Pat Long - Munkii Yebee Jul 21 '14 at 14:00

Excluding a specific machine from Group Policy - Server Essentials 2012

3 Answers3