Solved

blocking gpo flow down

Posted on 2008-10-28
7
263 Views
Last Modified: 2012-05-05
i am working with a administrator of a ou in a large ad tree. He has asked if I can block certain gpos from flowing into his ou? is this possiblke and if so how. Thanks guys
0
Comment
Question by:zenworksb
7 Comments
 
LVL 13

Expert Comment

by:leegclystvale
Comment Utility
Yes, you can select "Block Inheritance" on any GPO you specify.
0
 
LVL 70

Expert Comment

by:KCTS
Comment Utility
If you use Block Inhertiance it will block ALL policies from affecting that OU - Except that is policies that have been ENFORCED, which cannot be blocked.
0
 

Author Comment

by:zenworksb
Comment Utility
so i right click the ou and it will give me that option?
0
How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

 
LVL 18

Expert Comment

by:sk_raja_raja
Comment Utility
nope.....block inheritance on the OU at which the GPO is linked
0
 
LVL 18

Expert Comment

by:sk_raja_raja
Comment Utility
yeah you will see when you right click on the OU in group policy management console....not in AD users and computers
0
 
LVL 70

Expert Comment

by:KCTS
Comment Utility
Policies are blocked at the OU - not at the link - if you have not installed the Group Policy Management console get it and install it now - http://www.microsoft.com/downloads/details.aspx?FamilyID=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887&displaylang=en
0
 
LVL 1

Accepted Solution

by:
pbsnow earned 500 total points
Comment Utility
This pic might help you

You right click on the OU and click on Block Inheritance.

Then on the GPO's you still want applied to your OU you just Link an Existing GPO which is also under the right click menu on the OU.

Keep in mind that all of these changes are under the Group Policy Management menu. Not Active Directory Users and Computer.

The PIC I attached might help.

untitled.JPG
0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Join & Write a Comment

I'm sure that every Windows systems administrator has written, or at least used, a batch or VBS login script at some point in their career, whether it is to map network drives, install printers, or set some user preferences.  No more! With Window…
Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now