How to exclude a user or computer from getting a group policy applied
HTML-код
- Опубликовано: 25 авг 2024
- Learn how to exclude specific users users, computers, or security groups from applying specific group policy objects. In this example, I show you how to create a security group within Active Directory, and then used the advanced permissions options with the delegation tab of a group policy object to stop that group policy being applied to users and computers that are a member of the security group.
Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymoran...
As an AD server administrator for the company. I really thank you very much for your extremely useful videos. Hope you will continue to release more videos. Thank you very much!!! ❤❤❤
I'm glad you are finding these videos useful! Thanks for watching!
Thank you, this helped with my group policy in my home labs. Subscribed and will go through other videos on related topics.
Thanks for watching!
Danny, You're the man!
Thanks for watching!
Just as I realized I set the domain password policy to affect all accounts including my service accounts I saw this video! 😁 Thanks for saving my ass!
Thanks for watching!
Amazing videos, thanks. One question if take a pc out form a domain, the poli6still apply
No, group policies will only apply to domain joined computers or servers.
Thanks for watching!
Thank you for this
Thanks for watching!
Thanks , really good! One question, if a pc is taken out of a domain, wil the police stil apply
No, group policies will only apply to domain joined computers or servers.
Thanks for watching!
Thanks , really good! One question, if a pc is taken out of a domain, will the p
The policy still be applied on that pc taken out the domain?? Thanks
No, group policies will only apply to domain joined computers or servers.
Thanks for watching!
Do the authenticated users still get the group policy? Because the authenticated users are added in the security settings of the newly created security group ?
The users and groups in the security filtering will still get the group policy applied. It's just whatever you exclude that will stop getting it applied.
Thanks for watching!
Hey Danny, at 1:46 you tap the Advanced button. This button doesn't seem to be there for me. I only see Add, Remove and Properties (properties doesn't do the same as advanced). Any idea? I'm using Windows Server 2016
Oh nevermind I was looking at the policy object placed in the domain, and not in the folder for all objects. I'll leave my comment so people can learn from my mistake haha
Glad you've figured it out. Thanks for watching!
Thanks Danny; One question; I started to deploy Win11 on new computers there is a sign-in issue in>Network & Internet> Ethernet that I have to sign in/pass to get the DOMAIN; and because of this- most new computers are not receiving GPO ; do we have something to do with it before I downgrade all win11 machines to win10 ?
I'm not sure I fully understand what you mean. Are you getting any error messages?
Are the new computers in the correct organisational unit within Active Directory?
@@danny_moran yes; all computers are in Active Directory; issue begin when I start deploying Win 11 there is sign-in to domain so you have to click on it-problem is the end users they didn't know how to or where to click on.
hello sir
i have 2 questions plz.
1- how to delete software GPO after we have finished deploying an app via this gpo??
deleting the gpo object will delete the app from all computers. and if we just go to remove (allow users to continue use the software, but prevent new installation )option and THEN delete this gpo object, then also apps will get deleted from all computers. i don't want too many software setting GPOs in my AD.
2- how to create local admin account in 1 go to all computers from AD?? no.. (add local admin GPO) is not what i mean :(
see... sometimes i should login to the computer locally with an admin account user to fix the technical issue. but for my surprise, i cant log in via biult in administrator account due to many reasons. so I prefer to add another local user and give it admin privileges to use it in times of need. so how to create this account???
Until the software is no longer needed, you should keep the GPO there.
Have a look at this guide, it shows you how to push security groups to the local Administrator group of workstations and servers so you can give user accounts admin over them. ruclips.net/video/DdAEZdsIfSs/видео.html
Also, have a look into LAPS. It lets you set passwords for all of the default Administrator accounts very easily. ruclips.net/video/iI1XA2G420U/видео.html
Thanks for watching!