Depends if they are the sort of GPOs that eradicate the changes when they are no longer applied. Some of them have to be de-applied, so to speak.
If they are the type that revert back to the initial settings, then the separate OU with blocked inheritance should do the trick as suggested earlier. Or you could just deny the specifed user/computer/both the Apply Group Policy permission on the Delegation tab in GPMC. You could use Mark Russinovich's tips to remove the GPOs altogether http://blogs.technet.com/markrussinovich/archive/2005/04/30/circumventing-group-policy-settings.aspx 2009/9/3 Sam Cayze <[email protected]>: > Is there anyway to block all GPO's on an XP machine, other than de-joining > it from the domain? Need to diag a bug that is happening on some clients. > > -Sam > > > > -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." http://raythestray.blogspot.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
