Not applying GPO to Admin

[KRPGroup]

I have created a OU for our citrix servers under Member Servers and I have 2 GPO's (User/Computer) that I only want to apply to our users. Not the administrator or our IT Dept staff.

What is the proper way to accomplish this?

I have used the scope and removed authenticated users and put in Citrix Users (our custom group for all CTX staff). This works but I wanted to check to see if I was missing something?

 

[KRPGroup]

Note: IT staff are members of the Citrix Users as this group is used in the local Remote Desktop Users.

I guess I could add the IT Staff to the RDP grouq separately?

I just thought there was a way to setup a GPO and then with security or something deny it running on specific staff?
I was in the Delegation area but wasn't sure this was the right area?

 

[IllogicallyLogical]

Open the properties dialog box for the GPO. Click the Security tab. Select the Administrators group from the "Group or user names" list. If the Administrators group is not listed, then click Add and then add the Administators group (or whatever group you don't want the GPO to effect). Click the Deny check box for the Apply group policy permission and click OK.

Joey
A+, MCP