Would you like to learn how to apply a group policy to a specific computer? In this tutorial, we will show you how to configure the GPO permissions to apply its configurations to a specific computer.

• Windows 2012 R2
• Windows 2016
• Windows 2019
• Windows 10
• Windows 7

Equipment list

The following section presents the list of equipment used to create this tutorial.

As an Amazon Associate, I earn from qualifying purchases.

Tutorial GPO - Apply to a specific computer

On the domain controller, open the group policy management tool.

Windows 2012 - Group Policy Management

Create a new group policy.

Windows 2012 - Group Policy Objects

Enter a name for the new group policy.

Windows - Add GPO

In our example, the new GPO was named: MY-GPO.

On the Group Policy Management screen, select your GPO and access the Delegation tab.

GPO - Delegation

On the bottom of the screen, click on the Advanced button.

GPO - Delegation Advanced

Select the Authenticated users group and uncheck the permission to apply the group policy.

GPO - Specific user

Click on the Add button.

Click on the button named Object types.

GPO - COMPUTER OBJECT

Select the Computers type of object.

GPO - Exclude computer

Search and add a computer.

GPO - Add a computer

Select the computer and give permission to apply the group policy.

GPO - Apply to computer

Optionally, you may apply the GPO to a specific group of computers.

GPO - Apply to group of computers

In our example, the computer TECH-DC01 was given permission to apply the GPO named MY-GPO.

Tutorial GPO - Applying the group policy

On the Group policy management screen, you need to right-click the Organizational Unit desired and select the option to link an existent GPO.

Windows-2012-Applocker application

In our example, we are going to link the group policy named MY-GPO to the root of the domain.

GPO- tutorial linking

After applying the GPO you need to wait for 10 or 20 minutes.

During this time the GPO will be replicated to other domain controllers.

Reboot the remote computer and verify that the settings have been applied only to the selected computer.

In our example, only the computer TECH-DC01 will apply the configurations from the GPO named MY-GPO.