Views:
For Active Directory integrated policies, you can specify selected accounts and excluded accounts. The policy applies to accounts that belong to selected accounts but do not belong to excluded accounts. For example, AD Group1 contains ADuser1 and ADuser2. When selected accounts include "AD Group1" and excluded accounts include "ADuser1", then the policy only applies to ADuser2.