For Active Directory integrated policies, you can specify
selected accounts and excluded accounts. The policy applies to accounts
that belong to selected accounts but do not belong to excluded accounts.
For example, AD Group1 contains ADuser1 and ADuser2. When selected
accounts include "AD Group1" and excluded accounts include "ADuser1",
then the policy only applies to ADuser2.
Views: