Re: Problems with Blocking Inheritance

From: Mark Renoden [MSFT] (markreno_at_online.microsoft.com)
Date: 06/07/04 

Date: Tue, 8 Jun 2004 09:06:37 +1000

Hi Joe

Why do you ask about user policy passing blocks? At first you're talking
about computers. If the users belong to a different OU than the computers,
the user configuration settings will come from the RSOP on the OU in which
the users reside.

Kind regards 

-- 
Mark Renoden [MSFT]
Windows Platform Support Team
Email: markreno@online.microsoft.com
Please note you'll need to strip ".online" from my email address to email 
me; I'll post a response back to the group.
This posting is provided "AS IS" with no warranties, and confers no rights.
"Joe" <joedboswell at hotmail dot com> wrote in message 
news:%23$NoA6MTEHA.3548@TK2MSFTNGP09.phx.gbl...
>
> This seems like a VERY simple task...
>
> I have a bunch of WinXP machines in a bunch of OUs, I have put a certain
> number of these machines in an OU below a bunch of other OUs and Blocked
> Inheritance, looking at policy inheritance in GPMC it looks like its 
> working
> perfectly, however when I run RSOP everything falls apart!?!  All the 
> stuff
> that I DONT want inherited gets inherited!!!  Basically I am applying a
> logon policy on all the OUs above this one, then applying a computer 
> policy
> on the OU that has the Block put on it...
>
> What is the deal?  Do user policy pass the Blocks?!?  This is totally
> killing me, I am relying on this policy to work properly to keep 17 of my
> machines in production!!!
>
> Any help, ASAP would be friggin Stellar!
>
> Thanks,
>
> Joe
>
>

Relevant Pages

  • Re: Reinstall everytime assigned applications through GPO on start
    ... Software installation extension has been called for background policy refresh ... Stations - R&D Software (EMEA computers). ... Stations - R&D Software (EMEA computers) is set for installation because it ... The assignment of application Remote Administrator v2.1 from policy Software ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy for Users not Logged into the Domain
    ... addition to other typical user profile specific settings like IE ... > computers themselves are members of the domain. ... > script group policy that works fine with these computers. ... > like kiosk machines where domain authentication for users is not> required. ...
    (microsoft.public.windows.server.active_directory)
  • Problems with Blocking Inheritance
    ... I have a bunch of WinXP machines in a bunch of OUs, ... Inheritance, looking at policy inheritance in GPMC it looks like its working ...
    (microsoft.public.windows.server.active_directory)
  • Re: Problems with Blocking Inheritance
    ... "I have put a certain number of these machines in an OU below a bunch ... >> Inheritance, looking at policy inheritance in GPMC it looks like its ...
    (microsoft.public.windows.server.active_directory)
  • Re: better way to limit users/group to logon to specific workstati
    ... You can still do it in policy, ... logon locally setting, and apply it to all computers except the ones you ... Workstations" attribute - applying to the user accounts ...
    (microsoft.public.windows.group_policy)
Loading