Excluding User/Group from Group Policy

  1.  select the specific GP object
  2. go to Delegation tab and click Advanced (left bottom corner)
  3. add specific User/Group
  4. set permission for User/Group to Deny

ak technology service 
708-717-4645