Group Policy filtering
A Group Policy can map to sites, domains, and OUs. If a Group Policy is mapped to the OU, by default, it will apply to any object under it. But within an OU, domain, or site, there are lots of objects. Sometimes, we may have to target certain objects in the OU, domain, or site without changing the current Active Directory structure. Group Policy filtering capabilities allow us to further narrow down the Group Policy targets to security groups or individual objects.
There are a few different ways to perform filtering in Group Policy:
- Security filtering
- WMI filtering
Both of these methods have their own characteristics. It is up to engineers to choose the best method based on the filtering requirement.
Security filtering
Before you apply security filtering, the first thing to check is whether the Group Policy is mapped correctly to the site, domain, or OU. The security group or the objects you are going to target should be...
