Experts need a best practice imput. So you have your domain policy and pol1 applied at domain level and then the pol1 to OU1. Within OU1 you have a new OUA. You do not want OUA to inherit Pol1; only the new pol2 and domain policy. Is it better to right click the ouA from GMAC and block ineritance and then link Pol2 and Domain pol to that OUA or is it best practice to allow inheritance and go to the OUA Group Pol Inheritance tab and change the GPO status of the one you don't want applied e.g. Pol1 to 'all settings disabled'.