We can define the scope of a Group Policy Object (GPO) by linking it to specific Site, Domain or OU. When we link a GPO to a Site, Domain or OU, by default it would be applied to all objects within that scope, unless it is restricted by applying “Block Inheritance” at a lower level.
However, the scope of a GPO can be further narrowed down by using different kind of filtering, which is as follows:
1) Security Filtering along with Delegation
2) WMI Filtering
3) Item Level Targeting
In this article, we will see how we can implement these filtering and take granular control on the GPO target.