How to exclude certain groups from Windows Group Policy
11th July 2006
…How To…
Most policies you don’t want to apply to everyone, Domain Admins for example or maybe just remove for a while for testing purposes. Here’s the quick and simple way to do just that
A quick and simple way to exclude the group policy for certain groups of users is to open up MMC, Group Policy Manager, go to the properties and security tab of the policy and simply fill in as below. Select the deny option as this overrides any allow policies elsewhere that may affect it.
In the policy below I have chosen not to apply the policy to Domain Admins