Bernhard Lutz
asked on
Is it possible to force a GPO in a sub OU even if the parents OUs GPO has other settings of set?
Hi,
I have a question regarding GPOs.
Is it possible to force a GPO in a sub OU even if the parents OUs GPO has other settings set? So, I want to overwrite a parents GPOs setting within a sub OU.
Thank you in advance!
I have a question regarding GPOs.
Is it possible to force a GPO in a sub OU even if the parents OUs GPO has other settings set? So, I want to overwrite a parents GPOs setting within a sub OU.
Thank you in advance!
I don’t recommend blocking inheritance. Depending on the policy, specificity will apply the OU level policy and not the root one
ASKER
I do not want to disable inheritance either.
Current situation:
I have a GP at domain level which sets the proxy settings for IE.
Goal:
Now, we need to disable the proxy for some of our computers.
Current situation:
I have a GP at domain level which sets the proxy settings for IE.
Goal:
Now, we need to disable the proxy for some of our computers.
ASKER
@Mahesh
Thank you for your solution. It would work that way, but disabling inheritance is not what I am looking for. If there is another way it would be great!
Thank you for your solution. It would work that way, but disabling inheritance is not what I am looking for. If there is another way it would be great!
Change your IE policy to a GPO Registry preference that applies from the root. You can use item level filtering for the different settings
U are disabling inheritance for only single sub ou, this is simplest way to achieve what u r look for
Other ways are also there, but they need manipulation
Other ways are also there, but they need manipulation
There might be a bunch of non-enforced GPO at parent which would require relink.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
This will stop flowing parent gpo on sub ou and sub ou level gpo will apply
Only thing parent ou gpo shouldn't be set to enforced, else block inheritance setting won't take effect