User GPO exclude computer ou

Question

I created a user policy to copy files to their desktop based on what security group they are in. I was easily able to exclude this to run on servers using wmi filtering based on product type. I do however want to also exclude this to run on some workstations in specific OU's. How can I do this?

Answer 1

Hello,

Thank you so much for posting here.

To make sure that each GPO associated with a group can only be applied to devices running the correct version of Windows, use the Group Policy Management MMC snap-in to create and assign WMI filters to the GPO.

As for our requirement to exclude this to run on some workstations in specific OUs, we are wondering whether the user GPO is Group Policy preference item. You can use item-level targeting to change the scope of individual preference items, so they apply only to selected users or computers. Within a single Group Policy object (GPO), you can include multiple preference items, each customized for selected users or computers and each targeted to apply settings only to the relevant users or computers.

For more information, we could refer to:
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn789189(v=ws.11)

For any question, please feel free to contact us.

Best regards,
Hannah Xiong

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.