通常，当应用组策略时，它适用于所有计算机或用户组或所有用户。没有例外。但是，如果您想从组策略对象^{(Group Policy Object)}( GPO ) 中排除单个用户或计算机，则有一种方法。它将允许您排除单个用户或计算机。在我们开始之前，这适用于属于域的Windows 10计算机。这意味着您不能将其应用于您在家中使用的计算机。

^{(Exclude Individual Users)}从组策略对象中^{(Group Policy Object)}排除单个用户或计算机

1. ^(Select)在组策略管理控制台^{(Group Policy Management Console)}( GPMC ) t0 中^(GPMC)选择要应用例外的组策略对象^{(Group Policy Object)}
2. 单击^(Click)“委托”选项卡，然后单击“高级”按钮。
3. 单击^(Click)添加^(Add)按钮并选择要从组策略强制执行中排除的用户或计算机 。
   • 搜索时，用户是默认的搜索模式。
   • 切换到所有搜索以列出计算机。
   • 如果你想阻止一堆用户，你也可以添加用户组。
4. 选择您添加的用户或用户组或计算机。
5. 在权限中找到应用^{(Locate Apply)}组策略并勾选拒绝。单击应用^{(Click Apply)} ，然后单击确定。
6. 将组策略链接到容器或 OU（如果您尚未完成）。

通过在运行^(Run)提示符 ( Win +R ) 中键入 cmd打开命令提示符^{(Command Prompt)}，然后使用Ctrl+Shift+Enter启动它。它将打开具有管理员权限的命令提示符。^{(command prompt with admin permission.)}

接下来，键入gpupdate，然后按Enter键执行命令。它将立即在计算机上应用更改，但例外。

就是这样。

我希望这篇文章很容易理解，并且您能够从组策略^{(Group Policy)}对象中排除单个用户或计算机。

确保^(Make)尽可能将人员分组，否则很难记住和管理他们。

相关阅读：^{(Related Read:)} 如何仅将组策略应用于非管理员^{(How to apply Group Policy to Non-administrators only)}

How to exclude Individual Users or Computers from a Group Policy Object

Usually, when groυp policy is applied, it is appliеd for all the computers or user groups or all the users. There are no exceptions.  Howеver, if you want to exclude individual Users or Сomputers from a Grouр Policy Object (GPO), then there is a mеthod. It will allow yoυ to еxclude a single user or сomputer. Before we start, this works on a Windows 10 computer that is рart of the domain. It means you cannot aрply this tо сomputerѕ you are using at hоme.

Exclude Individual Users or Computers from Group Policy Object

1. Select the Group Policy Object in the Group Policy Management Console (GPMC) t0 which you want to apply the exception
2. Click on the “Delegation” tab and then click on the “Advanced” button.
3. Click on the Add button and choose the user or computer whom you want to exclude from group policy enforcement.
   • When searching, the user is the default search mode.
   • Switch to all searches to list computers as well.
   • You can also add user group if you want to block a bunch of users.
4. Select the user or user group or the computer you added.
5. Locate Apply group policy in permissions and checkmark deny. Click Apply and then OK.
6. Link the group policy to a container or OU (If you haven’t done already).

Open Command Prompt by typing cmd in the Run prompt (Win +R)  and launch it using Ctrl+Shift+Enter. It will open a command prompt with admin permission.

Next, type gpupdate, and press the Enter key to execute the command. It will instantly apply the change across the computer with the exception made.

That’s about it.

I hope the post was easy to follow, and you were able to exclude individual Users Or Computers From A Group Policy Object.

Make sure you group people whenever possible else, it will be difficult to remember and manage them.

Related Read: How to apply Group Policy to Non-administrators only

Related posts

• 无法在此计算机上打开Group Policy Object

• 使用Group Policy禁用Internet Explorer 11作为standalone browser

• 如何将Group Policy Editor添加到Windows 10 Home Edition

• Programs的Prevent installation来自可拆卸Media Source

• 更改Windows Updates Delivery Optimization Cache Drive

• 如何启用或Windows 10 Disable or Application Isolation feature

• 安全策略设置为显示关于最后一个交互式登录的信息

• 如何在Windows 10锁定所有Taskbar设置

• Limit Office 365 Telemetry使用Registry and Group Policy

• 如何在Edge browser启用Audio Sandbox

• 启用或使用Group Policy or Registry禁用Zoom auto更新

• 使用Group Policy & PowerShell配置受控Folder Access

• 禁用Delivery Optimization通过Group Policy or Registry Editor

• 如何检查Windows 10计算机上应用的Group Policy

• 如何指定自动重新启动前Update installation截止

• 如何使用Group Policy or Registry Editor设置桌面壁纸

• 在Windows 10中启用或禁用Fast Logon Optimization

• 在Windows 10打开本地Group Policy Editor时出错

• 如何在Windows 11/10上追踪WorkGroup Mode的User Activity

• 使用SCCM当Folder Redirection Group Policy不施加