The most obvious way would be to link the policy to an OU (or OUs) where the workstations are, and not to where your servers are.
Keep your servers in a separate OU and don't link policies at domain level if you don't want them on your servers.
That said, you are talking here about a user policy so it needs to apply to users, so you would also need to enable loopback with merge so the machines in scope apply this to all users who log on to them.


LinkBack URL
About LinkBacks
Reply With Quote