Question

"if you don't want a gpo to apply, which group policy permission do you apply to a user or group?"

Answer 1

The answer is "Disallow Apply".

In the Windows 2000, a Group Policy Object (GPO) is an accumulation of settings that characterize what a framework will look like and how it will carry on for a characterized gathering of users. Microsoft gives a program snap-in that enables you to utilize Group Policy Microsoft Management Console (MMC).