Understanding group strategies

You can use security filtering to apply GPOs to selected groups in Active Directory. For example, you might want to prevent certain GPOs from applying to certain groups, like the Administrators group. In this case, you’d use the Scope tab within Security Filtering in the GPO’s details pane to remove “Authenticated Users” and then add the specific groups to which the GPO should be applied.