Filtering the Scope of a GPO | Microsoft Learn
https://learn.microsoft.com/en-us/previous-versions/windows/desktop/Policy/filtering-the-scope-of-a-gpo
May 31, 2018 · By changing the Access Control Entries ( ACEs) within the DACL, the effect of any GPO can be modified to exclude or include the members of any security group. For more information about security groups, see How Security Groups are Used in Access Control. To apply a GPO to a specific group, both the Read and Apply Group Policy ACEs are required.
DA: 93 PA: 65 MOZ Rank: 95 Up or Down: Up