I am wanting to restrict a GPO to all users signing into a terminal server.
Do I just define the terminal server computer object as the scope and then exclude my admin users from having that GPO applied.
Sadly the object is in an OU with many other servers and moving it out isn't an option due to other GPs. (don't ask)
So is just creating a new GP and only applying it to that one computer object enough for it to only apply to users signing into that object?