Hi Guys, GPO Help

[ravindrakumar4]

10 computers are in one OU, i want to apply gpo in only 2 computers only is it possible please share your comments.

[Briser-fae-the-broch]

Just add the 2 computers into the GPO instead of all computers under “Security Filtering”

“The settings in the GPO can only apply to the following groups, users, and computers:”

[joecigan (ColonelCrash)]

Make sure “Authenticated Users” still have read permissions V

@briser

Just add the 2 computers into the GPO instead of all computers under “Security Filtering”

“The settings in the GPO can only apply to the following groups, users, and computers:”

[brankoceric (Cuber)]

Depending of what settings do you need in GPO you can use Item-level targeting.

[dbeato]

@ravindrakumar4

10 computers are in one OU, i want to apply gpo in only 2 computers only is it possible please share your comments.

What are the settings that you are looking to apply? That way we can determine what can be used.

[petegaughenbaugh (Pete ITProFL)]

I’ve never liked applying a GPO to individual computers, instead preferring to create a custom OU for the purpose of applying he GPO. It makes it easier to apply the GPO to other devices in the future

[justin1250]

@briser

Just add the 2 computers into the GPO instead of all computers under “Security Filtering”

“The settings in the GPO can only apply to the following groups, users, and computers:”

Just wanted to clarify, GPOs don’t apply to groups they can be filtered by groups but do not apply to them. That being said you can use a group of computers in security filtering to restrict the application to the computers you want.

@joecigan

Make sure “Authenticated Users” still have read permissions V

@briser

Just add the 2 computers into the GPO instead of all computers under “Security Filtering”

“The settings in the GPO can only apply to the following groups, users, and computers:”

That issue is only if you are using security filtering for User Configuration GPOs, as GPO objects even for users are read by the computer account now.

[Briser-fae-the-broch]

@jhart

@briser

Just add the 2 computers into the GPO instead of all computers under “Security Filtering”

“The settings in the GPO can only apply to the following groups, users, and computers:”

Just wanted to clarify, GPOs don’t apply to groups they can be filtered by groups but do not apply to them. That being said you can use a group of computers in security filtering to restrict the application to the computers you want.

I just said add the 2 computers into the section specified in the quotes in Group Policy Editor. No need for Groups. Simple.

I actually have a group of 5 Handheld computers in a Custom GPO using this and it works great, totally locked down and to do any new work on them I just remove them from the GPO, do the changes and then add them back in again.

[rinomardo2 (badbanana)]

you will need this in the future