Group Policy Exclude Security Group

I have written a group policy and would like it to apply to the whole Active Directory except for one security group.

Unfortunately, the group policy is still applied to all users.

I have added the security group in "Advanced" in the delegation and ticked "Deny" in "Apply group policy". The "Read" option is also ticked.

Images:

  • (GPO Delegation Configuration)
  • (GPO Delegation Full)
  • (Security Filter)
5
David Miller

David Miller

Executive Financial & Market Analyst

David Miller brings 15 years of experience in global economics, personal finance strategy, and market dynamics. He specializes in turning complex economic trends into actionable insights for everyday readers.

Share this article