• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 983
  • Last Modified:

GPO status

in W2008, in the details tab of a GPO, there is a drop down box next to GPO status:
it shows:
Enable
User settings disabled
computer settings disabled
....
....

in which case we use this drop down box?

thanks

0
jskfan
Asked:
jskfan
  • 4
  • 4
  • 2
6 Solutions
 
Joseph DalyCommented:
This basically blocks off the select portion of the GPO from running. Some postings on the net say that you can gain a bit of a boost by disabling a section of a GPO if it has no settings in it. I have heard that this is not true but some people swear by it.
0
 
KCTSCommented:
I'm not quite sure what ou are asking but if its under what condidtions you would use the disable user settings/disable computer settings tab then

If the GPO contains no computer settings, then you can disable the computer settings and that part of the GPO will not be applied and this may speed up their application

If the GPO contains no user settings then again you can disable the user part of the GPO and get some performance benefit

It has to be said though that the performance benefits are at best marginal and some would argue non-existant.

You can also disable the different parts of the GPO for troubleshooting process.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
jskfanAuthor Commented:
If a GPO is applied to users, it means automatically is disabled for computers and vice-versa
unless if there are 2 similar settings on 2 GPOs applied to computer and users and in this case the computer policy wins
there is a loopback policy, that uses merge , which can be applied to both.
even in this case it doesn't make sense at all.

I am not sure why it s there(GPO status)
0
 
KCTSCommented:
A GPO is applied to the domain or to an OU

If a GPO is applied to an OU then the user setting affects any users whose user accounts are in that OU
If a GPO is allpied to an OU then the computer settings affect any computers with comuter accounts in that OU
There are some user settings that are the same as computer settings (in which case the user settings normally prevail), however there are also a lot of settings that are in the user settings but not in the computer settings and vice versa.

If a user account is in one OU and the computer account is in another OU then its possible that the computer settings from one GPO will be combined with the user settingd from another GPO
0
 
jskfanAuthor Commented:
computer settings wins
0
 
KCTSCommented:
I dont understand your comment
0
 
jskfanAuthor Commented:
I believe you in your comment you meant when 2 GPOs settings  conflict (user and computer GPOs) always the computer gpo wins, instead of what it is been said in the previous comment.


Regarding GPO status drop down box, to me I don't see any benefits of it there.
0
 
KCTSCommented:
As I said, if the GPO does not contain any computer settings, then you can disable that part of the GPO - this essentially saves time as its not reading the policy to not apply anything. You may have a GPO for example that sets up folder redirection for users. Even though that policy contains no computer policies, the computer policies will be read from the policy when the GPO is applies - unless its been disabled.
0
 
jskfanAuthor Commented:
thanks
0

Featured Post

Microsoft Certification Exam 74-409

VeeamĀ® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

  • 4
  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now