Information Technology Reference
In-Depth Information
Typically, GPOs are processed in their link order, and if two GPOs configure the same setting,
the GPO that is processed last will control the setting. But when a GPO is set to Enforced, it is
always processed and can't be blocked.
To set a GPO to Enforced, select the link in the GPMC, either in the console tree or in the
Linked Group Policy Objects tab in the details pane, and select Enforced from the context
menu, as shown in Figure 6-4.
FIGURE 6-4
Selecting the Enforced option
Instrumentation filtering
A GPO usually applies to all members of the object it is linked to, but you can filter which
objects are affected by the GPO by using a security filter or by using a WMI filter. The filter is
applied to the GPO, not to the link.
To apply a security filter to a GPO, follow these steps:
1.
Open the GPMC and expand the console tree to display the domain for which you
want to set a security filter on a GPO.
2.
Select the GPO to which you want to apply the filter.
In the details pane, select the Scope tab.
3.
4.
Click Add in the Security Filtering section to open the Select User, Computer, Or Group
dialog box.
Enter the object names to select or click Advanced to search for them, as shown in
Figure 6-5.
5.
