Exclude user(s) from group policy

  • Thread starter Thread starter mirirom
  • Start date Start date
M

mirirom

hi,

i'm wondering if someone can offer a walkthrough for the
process of removing a single user from a group policy. in
particular, our domain enforces profile size quotas and
we'd like to exclude only a handful of our members from
this policy.

i believe this could be done by making a specific registry
entry somewhere, but for the life of me, i can't seem to
find any info on Technet or elsewhere.

any advice would be greatly appreciated. thanks in
advance...
 
You can add the handful of users to a group and add the group to the
Group Policy security. Set Apply Group Policy to Deny and Set Read
to Deny.

This GPO would then never apply to members of this security group
regardless of the permissions those members have in other security
groups.

322176 HOW TO: Administer GPO Properties in Windows 2000
http://support.microsoft.com/?id=322176


Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.
 
hi Tom,

thx for the reply. the solution works great for blocking
entire GPOs, but unfortunately in our case, there's only
one attribute that we're disabling. plus, the current
2000 GPO model infers that companies are in fact organized
themselves and individual users can be grouped with common
attributes. again in our case, we're anything but.
everyone here is *special* (joy).

anyway, in lieu of looking for the registry hack, we
created a new OU for these people and set up an overriding
GPO for this one trait.

a coworker states that he actually found this hack a few
years ago in NT4.0 and finding the related keys was a bit
easier since one could read the text values of the GPO
files (they're binary in 2K). thanks again...
 
Back
Top