https://ksfboa.com/tech/jacki/exclude-a-specific-user-or-computer-from-group-policy.html