Stopping a user GPO from applying to a PC

  • Thread starter Thread starter Phantom
  • Start date Start date
P

Phantom

I need to stop a user GPO from working when a user logs into a
particular pc. I still need the GPO to apply when the user logs into
a regular pc but not a specific pc. I have played around with it but
have not been successful yet. Any ideas?
 
On teh security tab of the GPO, add the computer in question, and then tick
off DENY Full Control. This should do the trick.

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com
 
Should hi deny Full Control, not just Read and Apply Policy. If hi deny Full
Control, hi can't edit the group policy from that computer.? are I'm right?

--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1
 
I tried this and it did not work. I moved the pc underneath the GPO
OU and denied full but still applies to the user.
 
One option is to put the computer in it's own OU and enable "loopback
processing" in replace mode in which case the user configuration configrued
in the OU that the computer is in will apply to ALL users that logon to that
computer with a domain account [unless filtering is used in that OU].
Another option may be to create a local user account for the user on that
computer using the same logon name and password as the user's domain
account. Group Policy user configuration will not apply to a user logging
onto the local machine account. You would have to make sure password changes
are kept in synch between domain and local account or user will lose access
to domain resources when his domain password is changed. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;231287
 
Back
Top