The Policy Server User Interface allows you to exclude a user or group of users from a policy. This feature is very useful if you have a large user group that should be included in a policy, but you want to exclude a small subset of the group from the policy.
To exclude a user or group from a policy
The Policy Users/Groups Dialog opens.
The symbol to the left of the user or group in the Current Members list changes to the following to indicate that the user or group is excluded from the policy.

When you exclude a group from a policy, the exclusion indicates that anyone included in the policy who is a member of the excluded group (or the specifically excluded user), is not included in the policy. For example, if a policy contained the group Employees, and the excluded group Marketing, anyone who is a member of the Employees group, and not part of the Marketing group is included in the policy.
| Copyright © 2011 CA. All rights reserved. | Email CA Technologies about this topic |