Re: Problems with Blocking Inheritance

From: Joe (joedboswell)
Date: 06/08/04 

Date: Mon, 7 Jun 2004 20:31:26 -0700

Haha, damn you MS guys are good... Yeah the level the policy is applied at
just so happens to be right above the start of all the users OUs. Wow, and
I thought all this AD security policy stuff would be as easy as setting up
that BBS back in 91.

Mark, I totally appreciate the help!

Joe

"Mark Renoden [MSFT]" <markreno@online.microsoft.com> wrote in message
news:uYUpbQOTEHA.3476@tk2msftngp13.phx.gbl...
> Hi Joe
>
> Why do you ask about user policy passing blocks? At first you're talking
> about computers. If the users belong to a different OU than the
computers,
> the user configuration settings will come from the RSOP on the OU in which
> the users reside.
>
> Kind regards
> --
> Mark Renoden [MSFT]
> Windows Platform Support Team
> Email: markreno@online.microsoft.com
>
> Please note you'll need to strip ".online" from my email address to email
> me; I'll post a response back to the group.
>
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> "Joe" <joedboswell at hotmail dot com> wrote in message
> news:%23$NoA6MTEHA.3548@TK2MSFTNGP09.phx.gbl...
> >
> > This seems like a VERY simple task...
> >
> > I have a bunch of WinXP machines in a bunch of OUs, I have put a certain
> > number of these machines in an OU below a bunch of other OUs and Blocked
> > Inheritance, looking at policy inheritance in GPMC it looks like its
> > working
> > perfectly, however when I run RSOP everything falls apart!?! All the
> > stuff
> > that I DONT want inherited gets inherited!!! Basically I am applying a
> > logon policy on all the OUs above this one, then applying a computer
> > policy
> > on the OU that has the Block put on it...
> >
> > What is the deal? Do user policy pass the Blocks?!? This is totally
> > killing me, I am relying on this policy to work properly to keep 17 of
my
> > machines in production!!!
> >
> > Any help, ASAP would be friggin Stellar!
> >
> > Thanks,
> >
> > Joe
> >
> >
>
>

Relevant Pages

  • Re: Problems with Blocking Inheritance
    ... "I have put a certain number of these machines in an OU below a bunch ... >> Inheritance, looking at policy inheritance in GPMC it looks like its ...
    (microsoft.public.windows.server.active_directory)
  • Problems with Blocking Inheritance
    ... I have a bunch of WinXP machines in a bunch of OUs, ... Inheritance, looking at policy inheritance in GPMC it looks like its working ...
    (microsoft.public.windows.server.active_directory)
  • Re: 3rd party AD password policy tool
    ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... If I block inheritance would I only block the user OU's I created? ... or make any unwanted changes to the domain or computer accounts. ... The reason for this is we want to enforce the same policy company wide but ...
    (microsoft.public.win2000.active_directory)
  • RE: Bypassing Windows 2000 Domain Password settings
    ... If you have "Block Policy Inheritance" enabled on the Domain Controllers OU, ... the settings you desire that exist in the Default Domain Policy. ...
    (Focus-Microsoft)
  • Re: Problems with Blocking Inheritance
    ... Why do you ask about user policy passing blocks? ... If the users belong to a different OU than the computers, ... > number of these machines in an OU below a bunch of other OUs and Blocked ... > Inheritance, looking at policy inheritance in GPMC it looks like its ...
    (microsoft.public.windows.server.active_directory)