RE: [ActiveDir] Exclude a specific user (or group) from a GPO (WMI Filter?)

Tue, 08 Feb 2005 08:47:33 -0800

Title: Message
Explicit deny would be my choice.
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason B
Sent: Tuesday, February 08, 2005 11:45 AM
To: [email protected]
Subject: Re: [ActiveDir] Exclude a specific user (or group) from a GPO (WMI Filter?)

Right, BUT in this case, it would be much easier to simply exclude the one user since removing "Authenicated Users" from the filter in the Default GPO and trying to add enough groups to include ALL our users minus him, would be tedious, at best.  I suppose I could make a new group that includes everyone but him, but I would think that that wouldn't be the recommended method.  I also didn't want to make a new GPO specifically for this setting, as that would be rather inefficient.
 
Isn't WMI Filtering the *suggested* method for doing something like excluding a specific user or group?
----- Original Message -----
Sent: Tuesday, February 08, 2005 8:56 AM
Subject: Re: [ActiveDir] Exclude a specific user (or group) from a GPO (WMI Filter?)

For users\groups you can use a security filter as opposed to a WMI filter.
 
 
steve patrick
 
----- Original Message -----
Sent: Tuesday, February 08, 2005 7:51 AM
Subject: [ActiveDir] Exclude a specific user (or group) from a GPO (WMI Filter?)

In this example, I want to exclude our CEO from having a forced IE start page through GPO, while the remainder of our domain keeps a forced homepage.  Is the best way to go about this, to write a WMI filter to exclude that specific user, or is there some better way to do it, as we have this set in our Default Domain Policy?
 
If so, can anyone point me to a good tutorial for writing such a WMI script?
 
Thanks.

Reply via email to