Is it posssible to exclude a group of a NAL?
In fact, it would be easier for me to apply a NAL to a O.U., and exclude a group with the few workstation I want, instead of creating a group with the workstation in which I want the application. I know for sure that I would have some problem later if a do that.

Any ideas?