Apply GPO only to one computer

WW-6729 371 Reputation points

Hello! I have a problem applying GPO to only one computer. This GPO has only Computer Configuration settings. We have WS2008R2 DC and out computers are on Windows 10. How should be in this case Security Filtering configured and how should Delegation be configured. Is it ok to add this computer to security filtering and under delegation authenticated users with read permission and domain computers with read permissions? I have tried multiple options and non of them work. Does my computer needs to be in a group and then i should apply security filtering to that group...


A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,706 questions
0 comments No comments
{count} votes

Accepted answer
  1. Fan Fan 15,286 Reputation points Microsoft Vendor

    To apply GPO to only one computer in specific OU, you can considered the following ways:
    1,Just edit the policy on the local group policy on the computer.
    2,Use the security filter:
    By default, the authenticated users have the read and apply permission for the GPOs. As you don't want all the computers in the OU to apply the policy, uncheck the box: apply group policy permission for the authenticated users group; And then add the computer ,give it read and apply group policy permission.
    It will be the same for users, keep the authenticated user with read permission only ,and give the specific user with read and apply group policy permission.

    1 person found this answer helpful.

3 additional answers

Sort by: Most helpful
  1. Oner Ziya Bas 81 Reputation points

    Hi, can you read please?


    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments

  2. WW-6729 371 Reputation points

    I have already read this but my question is how can I apply GPO to only one computer in specific OU?

    What is the proper way to apply GPO to 1 computer and how to apply GPO only to 1 user? How to configure Security Filtering in these scenarios and how to configure Delegation in these scenarios? It seems that nothing works when I try to configure GPO only for one computer. Thanks!

    0 comments No comments

  3. WW-6729 371 Reputation points

    Thank you guys, I've found out where the problem was. There was "ghost" GPO applied to specific computer I have tested with which denied applying policy. The computer was in a bunch of groups. Thank you for your time and patience!

    Best regards!