{"id":4046,"date":"2023-07-01T22:51:52","date_gmt":"2023-07-01T17:21:52","guid":{"rendered":"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/"},"modified":"2023-07-01T22:51:52","modified_gmt":"2023-07-01T17:21:52","slug":"how-can-i-exclude-a-single-ou-from-a-single-gpo","status":"publish","type":"question","link":"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/","title":{"rendered":"How can I exclude a single OU from a single GPO?"},"content":{"rendered":"<p>Hi Dears, We have a GPO that we want to apply to all our servers except ones in a particular OU.\u00a0 We want all the other policies to apply to this GPO so I don&#8217;t want to use Block Inheritance since every other GPO would then have to be manually linked to this OU.\u00a0 Can I enter this OU into the Scope settings for the GPO with a Deny somewhere or anything like that? how&#8217;s this?\u00a0 (just an example) <img loading=\"lazy\" decoding=\"async\" width=\"170\" height=\"266\" class=\"alignnone size-full wp-image-4045\" src=\"https:\/\/community.windowstechno.com\/community\/wp-content\/uploads\/2023\/07\/ou.jpg\" alt=\"\" \/><\/p>\n<ul>\n<li>I have a bunch of GPOs attached to the Prod OU.\u00a0 Under Prod, there are really 10 OUs, I&#8217;ve just shown 3 in the image.<\/li>\n<li>I want the App and Utility OUs to get all of the GPOs linked to Prod.<\/li>\n<li>I want the Web OU to get all of them except one specific GPO.<\/li>\n<\/ul>\n<p>If I block Inheritance on the Web OU, then it doesn&#8217;t get ANY of the GPOs at the Prod level and I have to relink them all, and any new ones, in order to keep Web up to date. I&#8217;m hoping there&#8217;s some way to link the GPO to Prod and simply exclude the Web OU. I don&#8217;t want to have to redo our entire OU structure so am trying to work with what&#8217;s currently there. \u00a0 Thanks.<\/p>\n","protected":false},"author":0,"comment_status":"open","ping_status":"closed","template":"","question-category":[21],"question_tags":[],"class_list":["post-4046","question","type-question","status-publish","hentry","question-category-group-policy"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How can I exclude a single OU from a single GPO? - WindowsTechno Community<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How can I exclude a single OU from a single GPO? - WindowsTechno Community\" \/>\n<meta property=\"og:description\" content=\"Hi Dears, We have a GPO that we want to apply to all our servers except ones in a particular OU.\u00a0 We want all the other policies to apply to this GPO so I don&#8217;t want to use Block Inheritance since every other GPO would then have to be manually linked to this OU.\u00a0 Can [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/\" \/>\n<meta property=\"og:site_name\" content=\"WindowsTechno Community\" \/>\n<meta property=\"og:image\" content=\"https:\/\/community.windowstechno.com\/community\/wp-content\/uploads\/2023\/07\/ou.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/\",\"url\":\"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/\",\"name\":\"How can I exclude a single OU from a single GPO? - WindowsTechno Community\",\"isPartOf\":{\"@id\":\"https:\/\/community.windowstechno.com\/community\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/community.windowstechno.com\/community\/wp-content\/uploads\/2023\/07\/ou.jpg\",\"datePublished\":\"2023-07-01T17:21:52+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/#primaryimage\",\"url\":\"https:\/\/community.windowstechno.com\/community\/wp-content\/uploads\/2023\/07\/ou.jpg\",\"contentUrl\":\"https:\/\/community.windowstechno.com\/community\/wp-content\/uploads\/2023\/07\/ou.jpg\",\"width\":170,\"height\":266},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/community.windowstechno.com\/community\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Questions\",\"item\":\"https:\/\/community.windowstechno.com\/community\/questions\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"How can I exclude a single OU from a single GPO?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/community.windowstechno.com\/community\/#website\",\"url\":\"https:\/\/community.windowstechno.com\/community\/\",\"name\":\"WindowsTechno Community\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/community.windowstechno.com\/community\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/community.windowstechno.com\/community\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/community.windowstechno.com\/community\/#organization\",\"name\":\"WindowsTechno Community\",\"url\":\"https:\/\/community.windowstechno.com\/community\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/community.windowstechno.com\/community\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/community.windowstechno.com\/community\/wp-content\/uploads\/2023\/02\/WindowsTechnoLogo.jpg\",\"contentUrl\":\"https:\/\/community.windowstechno.com\/community\/wp-content\/uploads\/2023\/02\/WindowsTechnoLogo.jpg\",\"width\":335,\"height\":101,\"caption\":\"WindowsTechno Community\"},\"image\":{\"@id\":\"https:\/\/community.windowstechno.com\/community\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How can I exclude a single OU from a single GPO? - WindowsTechno Community","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/","og_locale":"en_US","og_type":"article","og_title":"How can I exclude a single OU from a single GPO? - WindowsTechno Community","og_description":"Hi Dears, We have a GPO that we want to apply to all our servers except ones in a particular OU.\u00a0 We want all the other policies to apply to this GPO so I don&#8217;t want to use Block Inheritance since every other GPO would then have to be manually linked to this OU.\u00a0 Can [&hellip;]","og_url":"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/","og_site_name":"WindowsTechno Community","og_image":[{"url":"https:\/\/community.windowstechno.com\/community\/wp-content\/uploads\/2023\/07\/ou.jpg","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/","url":"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/","name":"How can I exclude a single OU from a single GPO? - WindowsTechno Community","isPartOf":{"@id":"https:\/\/community.windowstechno.com\/community\/#website"},"primaryImageOfPage":{"@id":"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/#primaryimage"},"image":{"@id":"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/#primaryimage"},"thumbnailUrl":"https:\/\/community.windowstechno.com\/community\/wp-content\/uploads\/2023\/07\/ou.jpg","datePublished":"2023-07-01T17:21:52+00:00","breadcrumb":{"@id":"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/#primaryimage","url":"https:\/\/community.windowstechno.com\/community\/wp-content\/uploads\/2023\/07\/ou.jpg","contentUrl":"https:\/\/community.windowstechno.com\/community\/wp-content\/uploads\/2023\/07\/ou.jpg","width":170,"height":266},{"@type":"BreadcrumbList","@id":"https:\/\/community.windowstechno.com\/community\/question\/how-can-i-exclude-a-single-ou-from-a-single-gpo\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/community.windowstechno.com\/community\/"},{"@type":"ListItem","position":2,"name":"Questions","item":"https:\/\/community.windowstechno.com\/community\/questions\/"},{"@type":"ListItem","position":3,"name":"How can I exclude a single OU from a single GPO?"}]},{"@type":"WebSite","@id":"https:\/\/community.windowstechno.com\/community\/#website","url":"https:\/\/community.windowstechno.com\/community\/","name":"WindowsTechno Community","description":"","publisher":{"@id":"https:\/\/community.windowstechno.com\/community\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/community.windowstechno.com\/community\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/community.windowstechno.com\/community\/#organization","name":"WindowsTechno Community","url":"https:\/\/community.windowstechno.com\/community\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/community.windowstechno.com\/community\/#\/schema\/logo\/image\/","url":"https:\/\/community.windowstechno.com\/community\/wp-content\/uploads\/2023\/02\/WindowsTechnoLogo.jpg","contentUrl":"https:\/\/community.windowstechno.com\/community\/wp-content\/uploads\/2023\/02\/WindowsTechnoLogo.jpg","width":335,"height":101,"caption":"WindowsTechno Community"},"image":{"@id":"https:\/\/community.windowstechno.com\/community\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/community.windowstechno.com\/community\/wp-json\/wp\/v2\/question\/4046","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/community.windowstechno.com\/community\/wp-json\/wp\/v2\/question"}],"about":[{"href":"https:\/\/community.windowstechno.com\/community\/wp-json\/wp\/v2\/types\/question"}],"replies":[{"embeddable":true,"href":"https:\/\/community.windowstechno.com\/community\/wp-json\/wp\/v2\/comments?post=4046"}],"wp:attachment":[{"href":"https:\/\/community.windowstechno.com\/community\/wp-json\/wp\/v2\/media?parent=4046"}],"wp:term":[{"taxonomy":"question-category","embeddable":true,"href":"https:\/\/community.windowstechno.com\/community\/wp-json\/wp\/v2\/question-category?post=4046"},{"taxonomy":"question_tags","embeddable":true,"href":"https:\/\/community.windowstechno.com\/community\/wp-json\/wp\/v2\/question_tags?post=4046"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}