Enforce a GPO

S

skip

Guest
Hello

I want to apply certain settings globaly to all users in the domain, so i am
going to create a GPO and link this GPO at the domain level, and then enforce
this GPO. My questions is, i have OU's that house users and machines, and i
have linked GPO's to these OU's. If i enforce the GPO that is at the domain
level then will this GPO overwrite the setttings that I have set at the OU
level?

As i understand how this works. If I enforce a GPO the settings in this GPO
will overwrite any settings in GPO's that are at a lower level. If this is
correct then this creates a problem for me, because i only need to enforce a
few settings in a GPO to all users, i dont want the GPO to blow away all the
settings that I have created for OU's


 


D

DanJ

Guest
Hi,

I believe you are correct in your understanding.

Applying a policy at the Domain level will cover all users/computers within
the domain, but if 'No Override' is set on the GPO link, it will literally
override everything. The link given below as a 'note' towards the end of the
page that gives an explanation:
http://support.microsoft.com/kb/322143/en-us

If you environment isn't large, GPOs further down can be examined to ensure
that they don't have settings that will conflict with those set at the domain
level. To be sure, you can use Resultant Set of Policies (RSOP) and check
that users in various OU's are receiving the correct settings. Sorry this is
not ideal. Others may be able to offer a better suggestion.

Dan

"skip" wrote:

> Hello
>
> I want to apply certain settings globaly to all users in the domain, so i am
> going to create a GPO and link this GPO at the domain level, and then enforce
> this GPO. My questions is, i have OU's that house users and machines, and i
> have linked GPO's to these OU's. If i enforce the GPO that is at the domain
> level then will this GPO overwrite the setttings that I have set at the OU
> level?
>
> As i understand how this works. If I enforce a GPO the settings in this GPO
> will overwrite any settings in GPO's that are at a lower level. If this is
> correct then this creates a problem for me, because i only need to enforce a
> few settings in a GPO to all users, i dont want the GPO to blow away all the
> settings that I have created for OU's
>
>
 

Top