Do not forget to watch the Active Directory playlist
@prakrutkateshiya705
3 ай бұрын
@@dctechnet affcourse
@user-hy9ho9xx5n
5 ай бұрын
Interviewer asked me one question in gpo, suppose to be one OU have hundred users, how one person exclude from policy, as best practice, if feasible, please do the lab
@dctechnet
5 ай бұрын
Sure... will do a lab on just excluding a single person from the GPO
@zarakikenpachi1773
3 ай бұрын
Create a Security Group: Create a new security group in Active Directory and add the user you want to exclude from the GPO to this group. For example, you could name the group "GPO Excluded Users". Modify GPO Security Filtering: Open the Group Policy Management Console (GPMC). Navigate to the GPO that you want to modify. Right-click on the GPO and select "Edit" to open the Group Policy Editor. In the Group Policy Editor, navigate to "Computer Configuration" or "User Configuration" > "Policies" > "Windows Settings" > "Security Settings" > "Restricted Groups" (or any other policy setting you want to modify). Right-click on the policy setting and select "Properties". In the Properties window, go to the "Security" tab. Remove the default security groups (such as "Authenticated Users") from the list and add the security group you created earlier ("GPO Excluded Users"). Ensure that the security group you added has the "Deny" permission for the policy setting. Add User to Security Group: Add the user you want to exclude from the GPO to the "GPO Excluded Users" security group.
Пікірлер: 9