question

LMS-8913 avatar image
0 Votes"
LMS-8913 asked ·

Group Policy folder & Process exclusions for DC & Clients

Hi

We are looking for exclusions specific for Windows 2016 DCs, Windows servers and Win 10 Client PCs. With our environment we have Symantec End point protection, Cisco AnyConnect / ISE, DPM etc.

Thanks in advance

windows-active-directorywindows-group-policy
· 2
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
I am checking to see if the problem has been resolved.
If there's anything you'd like to know, don't hesitate to ask.
Best Regards,

0 Votes 0 ·

Hi,
 
Just checking in to see if the information provided was helpful.
If the reply helped you, please remember to accept it as an answer.
If no, please reply and tell us the current situation in order to provide further help

Best Regards,

0 Votes 0 ·

1 Answer

FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered ·

Hi,
If you want to exclude some specific PCs or computers , here are some methods for your reference:
1, The security filter on the GPO.
Groups need to be created , and put the the 2016DCs and Clients into different groups for different purpose.
If you don't want them to apply the group policy, just add the groups and deny the "apply group policy "permission as following screenshot showing:
78484-3171.jpg
2, To make sure that each GPO associated with a group can only be applied to devices running the correct version of Windows, use the Group Policy Management
MMC snap-in to create and assign WMI filters to the GPO.
To create a WMI filter that queries for a specified version of Windows, you can get more details in the following link:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-wmi-filters-for-the-gpo
Best Regards,




3171.jpg (113.2 KiB)
3171.jpg (113.2 KiB)
·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.