Evo sta kaze Microsoft:
Citat:
By default, Group Policy is inherited and cumulative, and it affects all computers and users in an Active Directory container.
GPOs are processed in the following order:
1. The local GPO is applied.
2. GPOs linked to sites are applied.
3. GPOs linked to domains are applied.
4. GPOs linked to organizational units are applied. For nested organizational units, GPOs linked to parent organizational units are applied before GPOs linked to child organizational units are applied.
Note The order in which GPOs are processed is significant because when policy is applied, it overwrites policy that was applied earlier.
By convention, computer-related policy settings override user-related policy settings.
Znaci, najjednostavniji nacin je da kreiras zaseban OU u koji ces smestiti tog korisnika, i nad tim OU primeniti kopiju domenske polise iz koje ces izbaciti zakljucavanje taskbara. Ako u buducnosti budes imao jos takvih korisnika kojma treba otkljucan taskbar, samo ih jednostavno prebacis u ovaj OU i to je to, a kad nekom treba ponovo da ga zakljucas, samo ga izbacis iz OU.