question

WW-6729 avatar image
0 Votes"
WW-6729 asked WW-6729 answered

Apply GPO only to one computer

Hello! I have a problem applying GPO to only one computer. This GPO has only Computer Configuration settings. We have WS2008R2 DC and out computers are on Windows 10. How should be in this case Security Filtering configured and how should Delegation be configured. Is it ok to add this computer to security filtering and under delegation authenticated users with read permission and domain computers with read permissions? I have tried multiple options and non of them work. Does my computer needs to be in a group and then i should apply security filtering to that group...

Thanks!

windows-group-policy
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

4 Answers

FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered FanFan-MSFT commented

Hi,
To apply GPO to only one computer in specific OU, you can considered the following ways:
1,Just edit the policy on the local group policy on the computer.
2,Use the security filter:
By default, the authenticated users have the read and apply permission for the GPOs. As you don't want all the computers in the OU to apply the policy, uncheck the box: apply group policy permission for the authenticated users group; And then add the computer ,give it read and apply group policy permission.
46472-12091.png
46473-12092.png
46335-12093.png
It will be the same for users, keep the authenticated user with read permission only ,and give the specific user with read and apply group policy permission.


12091.png (56.2 KiB)
12092.png (79.7 KiB)
12093.png (18.8 KiB)
· 1
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

FanFan-MSFT avatar image FanFan-MSFT ·

Hi,
Welcome to share your current situation if there are any updates.
Please feel free to let us know if you need further assistance.
 
Best Regards,

1 Vote 1 ·
OnerZiyaBas-5108 avatar image
0 Votes"
OnerZiyaBas-5108 answered

Hi, can you read please?

how-to-apply-gpo-to-computer-group-in-active-directory



If the Answer is helpful, please click "Accept Answer" and upvote it.

5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

WW-6729 avatar image
0 Votes"
WW-6729 answered

I have already read this but my question is how can I apply GPO to only one computer in specific OU?

What is the proper way to apply GPO to 1 computer and how to apply GPO only to 1 user? How to configure Security Filtering in these scenarios and how to configure Delegation in these scenarios? It seems that nothing works when I try to configure GPO only for one computer. Thanks!

5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

WW-6729 avatar image
0 Votes"
WW-6729 answered

Thank you guys, I've found out where the problem was. There was "ghost" GPO applied to specific computer I have tested with which denied applying policy. The computer was in a bunch of groups. Thank you for your time and patience!

Best regards!

5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.