Remove the Authenticated users and add a security group, find the screenshot for the same. See the below links for implemainting the Security filtering. You will get the step by step infomation with screenshots. http://www.windowsnetworking.com/articles_tutorials/group-policy-security-filtering.html http://technet.microsoft.com/en-us/library/cc781988(WS.10).aspx _______________________________________________________________ 2. Another way for GPO exclution. http://social.technet.microsoft.com/wiki/contents/articles/exclusion-for-a-group-policy-object.aspx 3. Also you can use "Item lebel targetting" for GPO exclution.