How to add or remove a user to/from Group Policy

[chicagotech]

We are running Windows 2008 domain. Someone created a group policy. How can I add/remove a user to/from the policy?
--------------------------------------------------------------------------------

[chicagotech]

From you description I understand that you want to know the way to allow a user to apply or not apply one specific policy. If I have misunderstood anything, please feel free to let me know.

Based on my experience, to allow a user to apply a GPO, you should add the user to the OU, domain or site, where the GPO is linked to. If you have linked a GPO to the OU, domain or site which the user belong to and you do not want the user to apply the GPO, you can try one of the following suggestions:
• Just move the user out of the OU, domain or site.
• Do not give user permission to apply the GPO. Detailed steps are as below:
1.Logon the DC, click Start>Run, type “gpmc.msc” and press the enter button.
2.Find and select the GPO in “Group Policy Management” console.
3.In the right panel, select the “Delegation” tab, click “Add…” button and add the specific users.
4.After added the users, select them, and click the “Advanced” button. On the Security settings page, give them deny permissions of “Read” and “Apply Group Policy” for this GPO.

As we know, the user need at least both “Read” and “Apply Group Policy” permissions on the GPO. If you deny the necessary permissions, they will fail to apply the GPO and hence the GPO will take no effect on them.

For more information about security filtering, please refer to the following article:
Security filtering using GPMC
http://technet.microsoft.com/en-us/libr ... 88(v=ws.10).aspx

Furthermore, for some specific policy settings, you can use the Group Policy Preferences (GPP) feature and it provide some specific filter features as well. About GPP and filtering, you can refer to the following article:
Group Policy Preferences: Getting Started
http://technet.microsoft.com/en-us/libr ... 92(v=ws.10).aspx
Security Filtering, WMI Filtering, and Item-level Targeting in Group Policy Preferences
http://blogs.technet.com/b/grouppolicy/ ... ences.aspx

Please try me suggestions and if any further questions, please feel free to contact me again.


--------------------------------------------------------------------------------

Best regards,

Darlene Li
Partner Online Technical Community