Forum Discussion
Excluding a user or machine from Domain Group Policy
Hi,
I am trying to exclude a machine/user from applying domain group policy for screen lock. However none of the solution I found on google worked for me.
I created a new GPO and linked it to the Active Directory Group (user is a member) and linked the GPO to the group. and desired OU. In the Policy delegation tab under Advanced setting added the user and set permission Deny : Allow the policy. That too didn't work. Tried the same with the computer account too, still no luck.
3 Replies
The solution usually is to just not add the user or computer object to group.
I even tried adding user and computer object to the GPO instead of the adding a group. Still no luck.
Yes, not adding the user or computer object is the simpler process.
