Re: [ActiveDir] Exclude a specific user (or group) from a GPO (WMI Filter?)

[Jason B]

Right, BUT in this case, it would be much easier to simply exclude the one user since removing "Authenicated Users" from the filter in the Default GPO and trying to add enough groups to include ALL our users minus him, would be tedious, at best.  I suppose I could make a new group that includes everyone but him, but I would think that that wouldn't be the recommended method.  I also didn't want to make a new GPO specifically for this setting, as that would be rather inefficient.   Isn't WMI Filtering the *suggested* method for doing something like excluding a specific user or group? ----- Original Message ----- From: Steve Patrick To: ActiveDir@mail.activedir.org Sent: Tuesday, February 08, 2005 8:56 AM Subject: Re: [ActiveDir] Exclude a specific user (or group) from a GPO (WMI Filter?) For users\groups you can use a security filter as opposed to a WMI filter.   see http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/Default.asp?url="">   steve patrick   ----- Original Message ----- From: Jason B To: ActiveDir@mail.activedir.org Sent: Tuesday, February 08, 2005 7:51 AM Subject: [ActiveDir] Exclude a specific user (or group) from a GPO (WMI Filter?) In this example, I want to exclude our CEO from having a forced IE start page through GPO, while the remainder of our domain keeps a forced homepage.  Is the best way to go about this, to write a WMI filter to exclude that specific user, or is there some better way to do it, as we have this set in our Default Domain Policy?   If so, can anyone point me to a good tutorial for writing such a WMI script?   Thanks.