none
GPO Needs to be denied for particular Machine

    Question

  • Hi all

    I need help in denying a GPO to a particular Computer.

    i have created a GPO for mapping printer . It is a User GPO.

    Could some one let me know, how this can be blocked for particular computer?

    dk

    Friday, November 11, 2016 3:17 AM

All replies

  • In the Delegation Tab of GPO, At the bottom of the screen on left side you will see a option "Advance" you can add a object and select Deny


    Thanks HA

    Friday, November 11, 2016 6:43 AM
  • Hi Deepak,

    please take a look also here on what GPO Security Filtering is and how it helps you control GPO ACLs:

    Filtering the Scope of a GPO

    A guide on setting up the permission (Anup's reply) is to be found here:

    How to apply a Group Policy Object to individual users or computer

    Regards,


    Stoyan (Please take a moment to "Vote as Helpful" and/or "Mark as Answer" where applicable. This helps the community, keeps the forums tidy, and recognizes useful contributions. Thanks!)


    Friday, November 11, 2016 9:26 AM
  • > Could some one let me know, how this can be blocked for particular
    > computer?
     
    Starting with MS16-072, funny enough you can block computers from
    reading your user gpos, which in turn will prevent them to apply :)
     
    So simply go to the delegation tab - advanced, add the computer and
    check "read gpo - deny".
     
    Friday, November 11, 2016 1:15 PM