Re: Problems with Blocking Inheritance

From: Mike Kline (mkline_at_gmail.com)
Date: 06/08/04 

Date: 8 Jun 2004 04:38:53 -0700

Joe,
I noticed that you wrote

"I have put a certain number of these machines in an OU below a bunch
of other OUs"

How deep are you nesting your OU's? Things can get tricky when you
start nesting to far, you may be making things a lot more complicated
than they need to be.

 

"Mark Renoden [MSFT]" <markreno@online.microsoft.com> wrote in message news:<uYUpbQOTEHA.3476@tk2msftngp13.phx.gbl>...
> Hi Joe
>
> Why do you ask about user policy passing blocks? At first you're talking
> about computers. If the users belong to a different OU than the computers,
> the user configuration settings will come from the RSOP on the OU in which
> the users reside.
>
> Kind regards
> --
> Mark Renoden [MSFT]
> Windows Platform Support Team
> Email: markreno@online.microsoft.com
>
> Please note you'll need to strip ".online" from my email address to email
> me; I'll post a response back to the group.
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Joe" <joedboswell at hotmail dot com> wrote in message
> news:%23$NoA6MTEHA.3548@TK2MSFTNGP09.phx.gbl...
> >
> > This seems like a VERY simple task...
> >
> > I have a bunch of WinXP machines in a bunch of OUs, I have put a certain
> > number of these machines in an OU below a bunch of other OUs and Blocked
> > Inheritance, looking at policy inheritance in GPMC it looks like its
> > working
> > perfectly, however when I run RSOP everything falls apart!?! All the
> > stuff
> > that I DONT want inherited gets inherited!!! Basically I am applying a
> > logon policy on all the OUs above this one, then applying a computer
> > policy
> > on the OU that has the Block put on it...
> >
> > What is the deal? Do user policy pass the Blocks?!? This is totally
> > killing me, I am relying on this policy to work properly to keep 17 of my
> > machines in production!!!
> >
> > Any help, ASAP would be friggin Stellar!
> >
> > Thanks,
> >
> > Joe
> >
> >

Relevant Pages

  • Problems with Blocking Inheritance
    ... I have a bunch of WinXP machines in a bunch of OUs, ... Inheritance, looking at policy inheritance in GPMC it looks like its working ...
    (microsoft.public.windows.server.active_directory)
  • Re: Problems with Blocking Inheritance
    ... I thought all this AD security policy stuff would be as easy as setting up ... >> I have a bunch of WinXP machines in a bunch of OUs, ... >> number of these machines in an OU below a bunch of other OUs and Blocked ... >> Inheritance, looking at policy inheritance in GPMC it looks like its ...
    (microsoft.public.windows.server.active_directory)
  • Re: Problems with Blocking Inheritance
    ... Why do you ask about user policy passing blocks? ... If the users belong to a different OU than the computers, ... > number of these machines in an OU below a bunch of other OUs and Blocked ... > Inheritance, looking at policy inheritance in GPMC it looks like its ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricted Groups Not Working
    ... 2:Please bear in mind that 90% of the policy is applying it only seems to be the restricted groups section that isnt taking effect and 'allow to load and unload device drivers' which also doesnt seem to be working. ... Also all machines are running SP2 and with the latest hotfixes as provided by our SUS server. ... When adding users to the "Administrators" group, remember that you can't browse for that group, you have to type "Administrators". ... In the "Members of this group", browse for the "Global Security Group" created in Step 1. ...
    (microsoft.public.windows.group_policy)
  • Re: EventID 1054 from Userenv for startup script
    ... So if you said "some machines don't have full access to the network ... at startup" the GPO's seems not to apply correct. ... startup script policy. ...
    (microsoft.public.windows.group_policy)