IT tutorials
 
Windows
 

Windows Server 2008 : Group Policy Overview - Blocking Inheritance, Enforcing GPOs

- How To Install Windows Server 2012 On VirtualBox
- How To Bypass Torrent Connection Blocking By Your ISP
- How To Install Actual Facebook App On Kindle Fire
1/7/2014 7:55:50 PM

1. Blocking Inheritance

By default, GPO settings from GPOs at higher levels are automatically inherited at lower levels. For example, each OU automatically inherits all GPO settings set at the domain level. In this context, each OU is a child of the domain. Similarly, children OUs automatically inherit GPO settings from parent OUs; however, you can block this behavior.

Figure 1 shows how to enable Block Inheritance for a child OU. The West OU is a child OU of the Sales OU. The exclamation icon next to the OU and the checkmark next to Block Inheritance show that Block Inheritance is enabled.

Figure 1. Configuring Block Inheritance on an OU

Note

You can set Block Inheritance on an OU but not on a GPO.


Tip

When Block Inheritance is selected, it blocks all GPOs with one exception. If a GPO from any parent is set to Enforced, the Enforced GPO is not blocked.

2. Enforcing GPOs

There are times when you want to ensure that settings from a GPO take precedence no matter when they are applied. For example, you might want to ensure that Group Policy settings set at the domain level are not overwritten by settings at an OU level. Similarly, you might want to ensure that GPOs are not blocked even if an OU has Block Inheritance configured. You can do so by configuring Enforced on the GPO.

Figure 2 shows the setting as enforced for the Default Domain Policy. Notice that the GPO has a lock icon indicating that it is enforced. Of course, you can right-click it to see the checkmark next to Enforced.

Figure 2. Configuring Enforced for a GPO
 
Others
 
- Windows 7 : Updating Software - How to Remove Updates
- Windows 7 : Updating Software - How to Troubleshoot Problems Installing Updates
- Windows 7 : Updating Software - How to Verify Updates
- Windows 7 : BitLocker (part 4) - How to Disable or Remove BitLocker Drive Encryption, Troubleshooting BitLocker Problems
- Windows 7 : BitLocker (part 3) - How to Manage BitLocker Keys on a Local Computer, How to Recover Data Protected by BitLocker
- Windows 7 : BitLocker (part 2) - How to Enable BitLocker Encryption
- Windows 7 : BitLocker (part 1) - How to Use BitLocker with TPM Hardware
- Windows 7 : Encrypting File System (part 3) - How to Recover to an EFS-encrypted File Using a Data Recovery Agent
- Windows 7 : Encrypting File System (part 2) - How to Grant an Additional User Access to an EFS-encrypted File , How to Import Personal Certificates
- Windows 7 : Encrypting File System (part 1) - How to Encrypt a Folder with EFS, How to Create and Back Up EFS Certificates
 
 
Top 10
 
- Microsoft Visio 2013 : Adding Structure to Your Diagrams - Finding containers and lists in Visio (part 2) - Wireframes,Legends
- Microsoft Visio 2013 : Adding Structure to Your Diagrams - Finding containers and lists in Visio (part 1) - Swimlanes
- Microsoft Visio 2013 : Adding Structure to Your Diagrams - Formatting and sizing lists
- Microsoft Visio 2013 : Adding Structure to Your Diagrams - Adding shapes to lists
- Microsoft Visio 2013 : Adding Structure to Your Diagrams - Sizing containers
- Microsoft Access 2010 : Control Properties and Why to Use Them (part 3) - The Other Properties of a Control
- Microsoft Access 2010 : Control Properties and Why to Use Them (part 2) - The Data Properties of a Control
- Microsoft Access 2010 : Control Properties and Why to Use Them (part 1) - The Format Properties of a Control
- Microsoft Access 2010 : Form Properties and Why Should You Use Them - Working with the Properties Window
- Microsoft Visio 2013 : Using the Organization Chart Wizard with new data
programming4us programming4us
 
Popular tags
 
Video Tutorail Microsoft Access Microsoft Excel Microsoft OneNote Microsoft PowerPoint Microsoft Project Microsoft Visio Microsoft Word Active Directory Biztalk Exchange Server Microsoft LynC Server Microsoft Dynamic Sharepoint Sql Server Windows Server 2008 Windows Server 2012 Windows 7 Windows 8 Adobe Indesign Adobe Flash Professional Dreamweaver Adobe Illustrator Adobe After Effects Adobe Photoshop Adobe Fireworks Adobe Flash Catalyst Corel Painter X CorelDRAW X5 CorelDraw 10 QuarkXPress 8 windows Phone 7 windows Phone 8 BlackBerry Android Ipad Iphone iOS