• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 38
  • Last Modified:

Block inheritance to a sub container.

Please advise how do I avoid GPO3 to be applied to OUIII - please see below.   Thanks.  

Mydomain.com
      |___GPO1
      |___GPO2
      |___GPO3
      |___OU1
      |___OU2
      |___OU3
           |___OUI
           |___OUII
           |___OUIII
0
nav2567
Asked:
nav2567
  • 2
1 Solution
 
LearnctxEngineerCommented:
Block inheritance of the GPO's applying at OUIII. In GPMC.msc right click OUIII and select "Block inheritance".

Or create a supplemental GPO at that level that overrides the settings.
0
 
nav2567Author Commented:
No, I cannot do that.  If I right clicked OUIII and block inheriance, GPO1&2 will not be applied.  I need GPO1&2 to be applied to OUIII.
0
 
LearnctxEngineerCommented:
This is fine, block inheritance and link GPO1 and GPO2 to OUIII.

Mydomain.com
      |___GPO1
      |___GPO2
      |___GPO3
      |___OU1
      |___OU2
      |___OU3
           |___OUI
           |___OUII
           X [block inheritance]
           |___OUIII
                 |___GPO1
                 |___GPO2 

Open in new window

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now