Some of our users get unwanted GPO

[chicagotech]

Q: Some of our users get unwanted GPO, how can we prevent it?

A: If you do not want the user to get the specific GPO, you need to make sure the GPO did not linked the its OU, domain or site. Or you can set “Block Inheritance” property for the OU.

1.Logon the DC as admin, click Start>Run, type “gpmc.msc” and press the enter button.
2.Select the specific OU, right it and select “Block Inheritance”.
NOTE: If you set this property for the OU, it will not apply the other GPOs except the ones linked to it directly. However, if you set “Enforced” property for one GPO, it will get applied to all objects where it linked to, regardless wheter the domain, OU, sub OU has “Block Inheritance” property or not.