What does the phrase Manage by Exception mean?
Manage by Exception means that a GPO is applied to the Authenticated Users group for the container that the GPO is linked to. Then the deny permission is applied to whatever group you want to exclude from the GPO. In other words, the GPO will apply to everyone within the OU except for these designated accounts.
The GPanswers.com forum is closed now (thanks, spammers!)
But we encourage you to join us at LinkedIn in the “GPO Stuff” group.
Jeremy is regular there, and there is a reasonable system to prevent junk posts.
In all, we think it’s the right place to go for Group Policy-specific questions.
It’s a private group, but just JOIN it, and the owner should approve your request.
See you there !
-Jeremy Moskowitz, Group Policy MVP