Why not just create a sub OU and put the 55 people in there? To deny rights to apply, you need to be on the Delegation tab and click on Advanced. Add a group and deny them the right to Apply Group Policy. Deny permissions tend to make things difficult to understand, so I think a better option would be to remove the permission to apply from Authenticated Users and then add that permission to another group.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Anthony Crawford Sent: Wednesday, May 31, 2006 4:03 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Deny Read Permissions to Group Policy I have a sub OU with 60 users and I wish to apply a group policy to 55 of the users. I assume the easy way is to deny read permissions to the policy for the handful of employees I do not want the policy to apply to. I have gpmc open and looking under security filtering and can't seem to figure out how to accomplish this. If there is a better method then deny reading of the policy, I'll take the advice. Thanks. Tony List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
