Overriding domain policy for two important boxes

I have a Domain policy on a Windows 2003 server that requires all computers to automatically download and install Windows updates, which at times automatically reboots the machines. I have a Windows 2000 server and an XP machine that I need to not automatically reboot because they are running bar code collection devices that are vital to our operation. How do I override the domain policy for these two machines so that this does not happen?
The best way is create two GPOs with different policies. Then, additionally put the different computers into different security groups. Then, link the GPOs high-up in the structure; say, the domain or at a high OU level. Finally, remove Authenticated Users and add in just the names of the security groups that contain the computers you want affected.

Additional Expert Help: Be sure to check our Answer FAQ for more expert advice. For faster answers, visit ITKnowledge...


This was first published in January 2005

Dig Deeper on Microsoft Group Policy Management



Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.



Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:









  • VDI assessment guide

    Wait! Don't implement VDI technology until you know your goals and needs. A VDI assessment should consider the benefits of a VDI ...

  • Guide to calculating ROI from VDI

    Calculating ROI from VDI requires a solid VDI cost analysis. Consider ROI calculation models, storage costs and more to determine...

  • Keep the cost of VDI storage under control

    Layering, persona management tools and flash arrays help keep virtual desktop users happy and VDI storage costs down.