Group Policy "Enforce"

Posted on 2005-05-04
Last Modified: 2011-11-19
Does the enforce attribute in Group Policy bypass the block inheritance???
Question by:rrose987
    LVL 5

    Expert Comment

    enforce forces a group policy to be applied to an object, pol;icy inhertiance, is works the same as ntfs files permission, child objects take on parent objects, to enforce settings in a group policy you can use the no override option on the gpo options.

    i think thats right.

    LVL 57

    Accepted Solution


    Enforcing inheritance
    You can enforce policy inheritance by setting the No Override option on a Group Policy object link.

    When you select the No Override check box, you force all child policy containers to inherit the parent's policy, even if that policy conflicts with the child's policy and even if Block Inheritance has been set for the child.

    You can set No Override on a Group Policy object link by opening the properties dialog box for the site, domain, or organizational unit and making sure that the No Override check box is selected. For more information
    LVL 57

    Expert Comment

    by:Pete Long

    Expert Comment

    I guess I have one more question on this.  I notice that blocking the control panel under user configuration blocks all users, including admins.  Is this an all or nothing setting?  I don't see a way to specify which users to apply this to.


    Featured Post

    Gigs: Get Your Project Delivered by an Expert

    Select from freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely and get projects done right.

    Join & Write a Comment

    So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
    Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
    how to add IIS SMTP to handle application/Scanner relays into office 365.
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now