MCITP: Windows Server® 2008 Enterprise Administrator, Study Guide

6.4. Understanding Group Policy Security Filtering

As I've mentioned a few times already in this book, one of the tasks that administrators face on a daily basis is the challenge of creating a policy that applies only to a specific area within Active Directory. Accordingly, one of the tools available to administrators in this process is the ability to use Group Policy security filtering.

With Group Policy security filtering, administrators can actively select users or groups of users that will receive direct policy application. The whole basis for this is that all GPOs are created and associated with access control lists (ACLs). These ACLs contain a series of access control entities (ACEs) that define the security principals within. In Figure ...