Solved

Active directory GPO inheritance

Posted on 2016-10-12
8
38 Views
Last Modified: 2016-10-17
Dear All,

I have a GPO on domain level for setting default home page ,which is applied to all OU's,i want to change the default home page for some OU's, even after i apply a new GPO on the child OU the default domian level GPO i getting applied,how do i stop this and apply only the GPO which is applied on child OU.

Regards
0
Comment
Question by:Sysguys
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 18

Assisted Solution

by:hopeleonie
hopeleonie earned 250 total points
Comment Utility
Did you change the Link Order in the OU? Otherwise the GPO on domain level will win.
0
 

Author Comment

by:Sysguys
Comment Utility
link order means ? i didn't get you.
0
 
LVL 9

Expert Comment

by:Muhammad Mulla
Comment Utility
You will need to check the precedence of the GPOs under the inheritance tab in GPMC if they are at the same level.

Normally GPOs apply in this order: site, domain, OU and child OU. As a result, your GPO applied at the child OU level should overwrite the settings. From what you are saying, however, it sounds like this isn't happening.

Have you tried to enforce the GPO at the child OU?

If you don't want any of the settings from the default domain GPO, you could block inheritance from GPMC.

This might give you a better idea: https://technet.microsoft.com/en-gb/library/hh147307(v=ws.10).aspx
0
 

Author Comment

by:Sysguys
Comment Utility
There are lot of other GPO's that are needed which are also applied on domian level ,if i block inheritance i will not get the other policies.
0
Want to promote your upcoming event?

Is your company attending an event or exhibiting at a trade show soon? Are you speaking at a conference? Spread the word by using a promotional banner in your email signature. This will ensure your organization’s most important contacts are in the know.

 
LVL 9

Expert Comment

by:Muhammad Mulla
Comment Utility
There are two ways you can go about this.

1. Block inheritance and link all the GPOs that are required directly to the child OU. Take care of the precedence order.

2. Enforce the GPO containing your default homepage settings.

Try both methods on a test OU with a test user and see which one works better for you.
0
 
LVL 18

Assisted Solution

by:hopeleonie
hopeleonie earned 250 total points
Comment Utility
@Muhammad Mulla
Blocking and Enforcing is not best practice.

@Sysguys
have a look under Group Policy Inheritance:
https://technet.microsoft.com/en-us/library/hh147307(v=ws.10).aspx
0
 
LVL 38

Accepted Solution

by:
Adam Brown earned 250 total points
Comment Utility
Unless the GPO that is linked to the domain is configured as "Enforced", GPOs linked directly to OUs will take precedence by default. Setting a GPO to be "Enforced" causes it to take precedence on the OUs it is linked to and all child OUs. Using the Enforced setting is not a best practice because it complicates troubleshooting efforts. Right click the GPO that is linked to the Domain and make sure the Enforced option doesn't have a Checkmark next to it. If it does, click on it to remove the checkmark so it isn't enforced anymore. Once you do that, your GPOs linked to the child OUs you want should then take precedence. Enforced GPOs will *always* win when the settings in other GPOs are different. You can't keep this from happening by changing link order in GPMC, so make sure that Domain level GPO setting the home page isn't enforced.
1
 

Author Closing Comment

by:Sysguys
Comment Utility
thanks for helping i blocked inheritance and applied all the required GPO's except the home page and create a new GPO for the home page
0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now