Link to home
Start Free TrialLog in
Avatar of Bernhard Lutz
Bernhard Lutz

asked on

Is it possible to force a GPO in a sub OU even if the parents OUs GPO has other settings of set?

Hi,

I have a question regarding GPOs.

Is it possible to force a GPO in a sub OU even if the parents OUs GPO has other settings set? So, I want to overwrite a parents GPOs setting within a sub OU.

Thank you in advance!
Avatar of Mahesh
Mahesh
Flag of India image

In gpmc on sub ou level right click and click on block inheritance
This will stop flowing parent gpo on sub ou and sub ou level gpo will apply
Only thing parent ou gpo shouldn't be set to enforced, else block inheritance setting won't take effect
I don’t recommend blocking inheritance. Depending on the policy, specificity will apply the OU level policy and not the root one
Avatar of Bernhard Lutz
Bernhard Lutz

ASKER

I do not want to disable inheritance either.

Current situation:  
I have a GP at domain level which sets the proxy settings for IE.

Goal:
Now, we need to disable the proxy for some of our computers.
@Mahesh

Thank you for your solution. It would work that way, but disabling inheritance is not what I am looking for. If there is another way it would be great!
Change your IE policy to a GPO Registry preference that applies from the root. You can use item level filtering for the different settings
U are disabling inheritance for only single sub ou, this is simplest way to achieve what u r look for
Other ways are also there, but they need manipulation
There might be a bunch of non-enforced GPO at parent which would require relink.
ASKER CERTIFIED SOLUTION
Avatar of kevinhsieh
kevinhsieh
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial