Solved

GPO status

Posted on 2010-11-10
10
961 Views
Last Modified: 2012-05-10
in W2008, in the details tab of a GPO, there is a drop down box next to GPO status:
it shows:
Enable
User settings disabled
computer settings disabled
....
....

in which case we use this drop down box?

thanks

0
Comment
Question by:jskfan
  • 4
  • 4
  • 2
10 Comments
 
LVL 35

Accepted Solution

by:
Joseph Daly earned 167 total points
ID: 34106303
This basically blocks off the select portion of the GPO from running. Some postings on the net say that you can gain a bit of a boost by disabling a section of a GPO if it has no settings in it. I have heard that this is not true but some people swear by it.
0
 
LVL 35

Assisted Solution

by:Joseph Daly
Joseph Daly earned 167 total points
ID: 34106348
0
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 333 total points
ID: 34106775
I'm not quite sure what ou are asking but if its under what condidtions you would use the disable user settings/disable computer settings tab then

If the GPO contains no computer settings, then you can disable the computer settings and that part of the GPO will not be applied and this may speed up their application

If the GPO contains no user settings then again you can disable the user part of the GPO and get some performance benefit

It has to be said though that the performance benefits are at best marginal and some would argue non-existant.

You can also disable the different parts of the GPO for troubleshooting process.
0
 

Author Comment

by:jskfan
ID: 34106956
If a GPO is applied to users, it means automatically is disabled for computers and vice-versa
unless if there are 2 similar settings on 2 GPOs applied to computer and users and in this case the computer policy wins
there is a loopback policy, that uses merge , which can be applied to both.
even in this case it doesn't make sense at all.

I am not sure why it s there(GPO status)
0
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 333 total points
ID: 34107551
A GPO is applied to the domain or to an OU

If a GPO is applied to an OU then the user setting affects any users whose user accounts are in that OU
If a GPO is allpied to an OU then the computer settings affect any computers with comuter accounts in that OU
There are some user settings that are the same as computer settings (in which case the user settings normally prevail), however there are also a lot of settings that are in the user settings but not in the computer settings and vice versa.

If a user account is in one OU and the computer account is in another OU then its possible that the computer settings from one GPO will be combined with the user settingd from another GPO
0
Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

 

Author Comment

by:jskfan
ID: 34107709
computer settings wins
0
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 333 total points
ID: 34107741
I dont understand your comment
0
 

Author Comment

by:jskfan
ID: 34108436
I believe you in your comment you meant when 2 GPOs settings  conflict (user and computer GPOs) always the computer gpo wins, instead of what it is been said in the previous comment.


Regarding GPO status drop down box, to me I don't see any benefits of it there.
0
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 333 total points
ID: 34108460
As I said, if the GPO does not contain any computer settings, then you can disable that part of the GPO - this essentially saves time as its not reading the policy to not apply anything. You may have a GPO for example that sets up folder redirection for users. Even though that policy contains no computer policies, the computer policies will be read from the policy when the GPO is applies - unless its been disabled.
0
 

Author Closing Comment

by:jskfan
ID: 34114644
thanks
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now