Is it possible to use GPO to remove users from Global and Domain Local groups?


  • We have a problem with the occasional user being applied inappropriately to AD groups.
    What I would like to see happen is have a GPO where if the user account (requesting to be added to a group)  is not in OU location A, B, or C then the admin is not allowed to add the user to the group or the user is removed from the group. Is it possible to do something like this with GPO?
    Tuesday, February 09, 2016 4:29 PM


All replies