TechTalkz.com Logo Ask the Experts!

Go Back   TechTalkz.com Technology & Computer Troubleshooting Forums > Tech Support Archives > Microsoft > Windows Server 2003

Enforce a GPO

Windows Server 2003

 
 
Thread Tools Display Modes
Unread 27-08-2007, 11:57 PM   #1
skip
Guest
 
Posts: n/a
Enforce a GPO

Hello

I want to apply certain settings globaly to all users in the domain, so i am
going to create a GPO and link this GPO at the domain level, and then enforce
this GPO. My questions is, i have OU's that house users and machines, and i
have linked GPO's to these OU's. If i enforce the GPO that is at the domain
level then will this GPO overwrite the setttings that I have set at the OU
level?

As i understand how this works. If I enforce a GPO the settings in this GPO
will overwrite any settings in GPO's that are at a lower level. If this is
correct then this creates a problem for me, because i only need to enforce a
few settings in a GPO to all users, i dont want the GPO to blow away all the
settings that I have created for OU's


 
Unread 27-08-2007, 11:57 PM   #2
DanJ
Guest
 
Posts: n/a
RE: Enforce a GPO

Hi,

I believe you are correct in your understanding.

Applying a policy at the Domain level will cover all users/computers within
the domain, but if 'No Override' is set on the GPO link, it will literally
override everything. The link given below as a 'note' towards the end of the
page that gives an explanation:
http://support.microsoft.com/kb/322143/en-us

If you environment isn't large, GPOs further down can be examined to ensure
that they don't have settings that will conflict with those set at the domain
level. To be sure, you can use Resultant Set of Policies (RSOP) and check
that users in various OU's are receiving the correct settings. Sorry this is
not ideal. Others may be able to offer a better suggestion.

Dan

"skip" wrote:

> Hello
>
> I want to apply certain settings globaly to all users in the domain, so i am
> going to create a GPO and link this GPO at the domain level, and then enforce
> this GPO. My questions is, i have OU's that house users and machines, and i
> have linked GPO's to these OU's. If i enforce the GPO that is at the domain
> level then will this GPO overwrite the setttings that I have set at the OU
> level?
>
> As i understand how this works. If I enforce a GPO the settings in this GPO
> will overwrite any settings in GPO's that are at a lower level. If this is
> correct then this creates a problem for me, because i only need to enforce a
> few settings in a GPO to all users, i dont want the GPO to blow away all the
> settings that I have created for OU's
>
>

 
 

Thread Tools
Display Modes


Similar Threads
Thread Thread Starter Forum Replies Last Post
Enforce a GPO skip Windows Server 2003 1 27-08-2007 11:56 PM
How can I enforce uniqueness on an attribute forest wide? Jesse Windows Server 2003 5 27-08-2007 11:49 PM
How can I enforce uniqueness on an attribute forest wide? Jesse Windows Server 2003 1 27-08-2007 11:47 PM


< Home - Windows Help - MS Office Help - Hardware Support >


New To Site? Need Help?

All times are GMT. The time now is 07:13 PM.


vBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO
Copyright © 2005-2013, TechTalkz.com. All Rights Reserved - Privacy Policy
Valid XHTML 1.0 Transitional