Query on GPO

Question

Hi All

I have created an OU and it has 2 servers one if windows server 2016 and other Windows Server 2019. I dont want any group policy to get applied on it. What ever polices are applied are fine and i dont want any new policy to get applied on them. I want to test few CIS Benchmarks policies on these two servers by making change in local group policies. experts guide me.

Answer 1

Hello

Thank you for your question and reaching out. I can understand you are having query related to GPO .

If you have a group and you set the "apply group policy" to Deny.

https://learn.microsoft.com/en-us/archive/blogs/canitpro/step-by-step-excluding-users-or-usergroups-from-group-policy

OR

Go to the GPO object in question > Delegation > Advanced (bottom right of the window) and then under security options add the server you are looking to block the policy from and set it to deny everything

------------------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--