Create the Exception Groups
Applies To: Windows Server 2008
Use this procedure to create an exception group. Members of this group are prevented from applying a GPO.
Membership in Domain Admins is the minimum required to complete this procedure.
To create an exception group
Log on to your domain controller as a member of the Domain Admins group.
Click Start, and then click Server Manager.
The Server Manager console opens.
In the navigation pane, expand Roles, expand Active Directory Domain Services, expand Active Directory Users and Computers, and then expand your domain.
Right-click Computers, click New, and then click Group.
In the New Object – Group dialog box, in Group name, type a name for the group, and then click OK.