exclude user/machine from apply a GPO

To exclude user/machine to apply a GPO, in the Security filtering of the GPO add the user account/machine account and set the permissions to deny GPO.

For more information:

http://technet.microsoft.com/en-us/library/cc781988%28WS.10%29.aspx

http://adisfun.blogspot.com/2009/04/security-filtering-and-group-policy.html

exclude user/machine from apply a GPO

exclude user/machine from apply a GPO

To exclude user/machine to apply a GPO, in the Security filtering of the GPO add the user account/machine account and set the permissions to deny GPO.

For more information:

http://technet.microsoft.com/en-us/library/cc781988%28WS.10%29.aspx

http://adisfun.blogspot.com/2009/04/security-filtering-and-group-policy.html

exclude user/machine from apply a GPO

Copy GPO by using GPMC

To copy a Group Policy object

1. Open Group Policy Management.

2. In the console tree, right-click the Group Policy object (GPO) that you want to copy, and then click Copy.
   
   Where?

• Forest name/Domains/Domain name/Group Policy Objects/Group Policy object name

3. Do one of the following:

• To create a copy of the GPO in the same domain as the source GPO, right-click Group Policy Objects, click Paste, specify permissions for the new GPO in the Copy GPO box, and then click OK.

• To create a copy of the GPO in a different domain, double-click the destination domain, right-click Group Policy Objects, and then click Paste. Answer all the questions in the cross-domain copying wizard that appears, and then click Finish.

Notes

• You must have privileges to create GPOs in the destination domain to complete this procedure.

• For copy operations to another domain or forest, you may need to specify a migration table to update references to security principals and UNC paths in the source GPO to new values in the destination GPO. For more information about migration tables see "Migration Tables," "The migration table editor," and "Create a migration table" in Related Topics.

• You can also perform this procedure or a related task by using one or more of the sample scripts included with Group Policy Management. For more information, see "Scripting Group Policy tasks" in Related Topics.

Information about functional differences

• Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

Reference:

http://technet.microsoft.com/en-us/library/cc758287%28WS.10%29.aspx

Copy GPO by using GPMC

Deploying Group Policy Preferences

Group Policy preferences do not require you to install any services on servers. Windows Server 2008 includes Group Policy preferences by default as part of the Group Policy Management Console (GPMC). Administrators will also be able to configure and deploy Group Policy preferences in a Windows Server 2003 environment by installing the Remote Server Administration Tools (RSAT) on a computer running Windows Vista with SP1. Both RSAT and Windows Vista SP1 will be available in the first quarter of 2008.

Although you don’t have to install any services to create GPOs that contain Group Policy preferences, you must deploy the Group Policy preferences client-side extension (CSE) to any client computer to which you want to deploy preferences. The CSE will be available as a separate download from Microsoft. It supports the following Windows versions:

·         Windows XP with SP2

·         Windows Vista

·         Windows Server 2003 with SP1

Windows Server 2008 already includes the CSE.

source

http://thesystemadministrator.com/the_system_administrator/windows_server_2008/group_policy_preferences_in_windows_server_2008/

Deploying Group Policy Preferences