Problems with Blocking Inheritance

From: Joe (joedboswell)
Date: 06/07/04 

Date: Mon, 7 Jun 2004 13:34:47 -0700

This seems like a VERY simple task...

I have a bunch of WinXP machines in a bunch of OUs, I have put a certain
number of these machines in an OU below a bunch of other OUs and Blocked
Inheritance, looking at policy inheritance in GPMC it looks like its working
perfectly, however when I run RSOP everything falls apart!?! All the stuff
that I DONT want inherited gets inherited!!! Basically I am applying a
logon policy on all the OUs above this one, then applying a computer policy
on the OU that has the Block put on it...

What is the deal? Do user policy pass the Blocks?!? This is totally
killing me, I am relying on this policy to work properly to keep 17 of my
machines in production!!!

Any help, ASAP would be friggin Stellar!

Thanks,

Joe

Relevant Pages

  • Re: Problems with Blocking Inheritance
    ... "I have put a certain number of these machines in an OU below a bunch ... >> Inheritance, looking at policy inheritance in GPMC it looks like its ...
    (microsoft.public.windows.server.active_directory)
  • Re: Problems with Blocking Inheritance
    ... I thought all this AD security policy stuff would be as easy as setting up ... >> I have a bunch of WinXP machines in a bunch of OUs, ... >> number of these machines in an OU below a bunch of other OUs and Blocked ... >> Inheritance, looking at policy inheritance in GPMC it looks like its ...
    (microsoft.public.windows.server.active_directory)
  • Re: Problems with Blocking Inheritance
    ... Why do you ask about user policy passing blocks? ... If the users belong to a different OU than the computers, ... > number of these machines in an OU below a bunch of other OUs and Blocked ... > Inheritance, looking at policy inheritance in GPMC it looks like its ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricted Groups Not Working
    ... 2:Please bear in mind that 90% of the policy is applying it only seems to be the restricted groups section that isnt taking effect and 'allow to load and unload device drivers' which also doesnt seem to be working. ... Also all machines are running SP2 and with the latest hotfixes as provided by our SUS server. ... When adding users to the "Administrators" group, remember that you can't browse for that group, you have to type "Administrators". ... In the "Members of this group", browse for the "Global Security Group" created in Step 1. ...
    (microsoft.public.windows.group_policy)
  • Re: EventID 1054 from Userenv for startup script
    ... So if you said "some machines don't have full access to the network ... at startup" the GPO's seems not to apply correct. ... startup script policy. ...
    (microsoft.public.windows.group_policy)