For Active Directory integrated policies, you can specify selected Active
Directory User(s) and Group(s) as policy excluded accounts. For example, consider
that
AD Group1 contains an exclusion for ADuser1 and
ADuser2. In this case, ADUser1 and
ADUser2 will be excluded according to the AD
Group1 policy.
![]() |
NoteExclusion only works in an AD environment. The
Exception list does not support AD users/groups across the forest and
does not support global AD groups either.
|
For SharePoint user(s) and Group(s) integrated policies, you can specify selected
SharePoint
site(s) and user(s)/group(s) within the site(s).