Group Policy Management (GPM) security filtering is a way to control which users or groups can apply a specific Group Policy Object (GPO) in a domain. By using security filtering, you can target GPOs to specific users, groups, or computers, and ensure that only the intended users or computers receive the policy settings.
To use security filtering in Group Policy Management, follow these steps:
- Open Group Policy Management Console (GPMC).
- Locate the GPO that you want to filter and right-click it.
- Select "Edit" to open the Group Policy Editor.
- In the Group Policy Editor, select the "Scope" tab.
- Under the "Security Filtering" section, click on the "Add" button.
- In the "Select User, Computer, or Group" dialog box, enter the name of the user, group, or computer that you want to target with this GPO.
- Click on the "Check Names" button to verify the name.
- Click "OK" to add the user, group, or computer to the security filter.
Once youve added the user, group, or computer to the security filter, only those users, groups, or computers will receive the policy settings in the GPO. All other users or computers in the domain will not receive the policy settings.
Its important to note that when using security filtering, you must ensure that the "Authenticated Users" group is removed from the security filter if you want to restrict the policy settings to specific users or computers. If the "Authenticated Users" group is still present, then all users and computers in the domain will still receive the policy settings.