I think the "stamp" on the GPO goes out.. always.. which can be kind of annoying, for sure.
If I edit the delegation on a Controlled GPO to DENY "Apply Group Policy" so that a specific user or group of users does not process the policy, this custom delegation is overwritten the next time the GPO is deployed from Controlled GPO's.
Is there a way to define Individual GPO Delegation within Controlled GPO's?
I think the "stamp" on the GPO goes out.. always.. which can be kind of annoying, for sure.
-Jeremy Moskowitz
GPanswers.com
PolicyPak.com