Member Avatar for hisoka

i made a group policy in domain and i am an administrator but i am affected by the group policy i made... how to implement that correctly only domain users only???
thanks...
i am a newbie in windows so please consider to help in a beginners manner...
thanks...

  • 3 Contributors
  • 2 Replies
  • 87 Views
  • 4 Days Discussion Span
  • Latest Post Latest Post by billythehamster

Dani AI

Generated

Short, practical explanation and next steps.

Group Policy applies where it is linked (site/domain/OU), and by security permissions — so an Administrator account will still receive a GPO unless it is excluded by scope or security filtering. Also check whether the setting you see (for example firewall rules) lives under Computer Configuration; computer-side settings apply to the computer account and will affect anyone who logs on to that machine (this ties to 's firewall note).

If moving users into a separate OU is not desirable, use security filtering instead: create a dedicated global security group that contains only the users you want targeted, then in the Group Policy Management Console (GPMC) set that group as the GPOs security filter (do not rely on the built-in Domain Users group if you intend to exclude admins, since admin accounts often remain members of Domain Users). When changing filtering, verify the group has both Read and Apply Group Policy (Delegation -> Advanced). Avoid deleting Authenticated Users for GPOs that include computer settings unless you explicitly give the necessary computer account permissions.

To verify and troubleshoot, run gpupdate /force and generate a report with gpresult /h report.html or rsop.msc, and use GPMC's Group Policy Modeling to simulate results. Watch for domain-level links marked Enforced or for Block Inheritance on OUs — those will affect which policies win. If excluding admins, prefer scoped filtering to blanket Deny permissions, and always test changes in a lab before applying widely.

Recommended Answers

All 2 Replies

Member Avatar for zandiago

Is your internet firewall also affected by group policy...if so,you can reset it.

Member Avatar for billythehamster

You have probably created a group policy at a domain livel. You need to undo the changes you have done. Then within Active Directory Users and Computers (ADUC) right click and select New OU. Give it a name e.g. Domain Users.

Then create your group policy on this OU and drag the users from Users the new OU using ADUC.

The policy will then only apply to those users.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.