asked on
GPO Inheritance
Hi experts, this may be a basic question, but are GPO's inherited from the default domain policy on down?
So for example if the tree was something basic like below, will the users at the bottom apply GPO's from all of the GPO's they are in up to the top of the tree? Or only in the specific one they are in?
Default Domain Policy GPO
- User group organizational unit GPO
-Location organizational unit GPO
- Users
So for example if the tree was something basic like below, will the users at the bottom apply GPO's from all of the GPO's they are in up to the top of the tree? Or only in the specific one they are in?
Default Domain Policy GPO
- User group organizational unit GPO
-Location organizational unit GPO
- Users
Active DirectoryMicrosoft Legacy OSIT Administration
Last Comment
ChiIT
SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
how can I tell if I have inheritance blocked?
Two ways:
1. By looking at the icon/image of OU. If being blocked there is a blue circle with white exclamation mark
2. Right-click OU and see if there is a tick next to "Block Inheriteance". If there is then it is enabled, if there is isn't then it is not blocked
1. By looking at the icon/image of OU. If being blocked there is a blue circle with white exclamation mark
2. Right-click OU and see if there is a tick next to "Block Inheriteance". If there is then it is enabled, if there is isn't then it is not blocked
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
Thank you both, very helpful