Re: Preventing GP from being pushed down to a selective machine

Tech-Archive recommends: Fix windows errors by optimizing your registry



Hello Scrivnet78,

At least the password policy will be applied, if you check "block inheritance" doesn't matter.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


I have several machines that I need on my domain, but I need to
prevent ALL policies from being pushed down, including the default. Is
there a way to do this?

I made a different OU, moved the computers into them and made a new
generic policy, then linked it in GPMC and then went into the
properties of the OU and told it to not allow inheritance and to only
allow my generic policy. This still didn't seem to work.



.



Relevant Pages

  • Re: GP settings questions?
    ... Policy, and you want these GP only affect on specific OU object. ... SBSServers OU only contains the SBS Server and the other member Servers. ... locations are linked to this GPO, ... To Block Inheritance, for example, right-click the SBSComputers OU, ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO questions
    ... The Sybex book stated that using block inheritance at the OU would be like ... delt with the password policy at the domain level and the block inhertance ... >>password/account policy settings defined in Local Security Policy of the ... >>domain computers in that OU would apply to the local users on those domain ...
    (microsoft.public.cert.exam.mcse)
  • Re: GPO questions
    ... Other than password/account policy for domain users block inheritance at the ... OU level will prevent Group Policy defined settings from levels in the ... >>> certainly is an important account on sensitive domain computers such as ...
    (microsoft.public.cert.exam.mcse)
  • Re: Block inheritance ?
    ... Create a group in Active Directory. ... Computers OU to this new group. ... Control List and set the "Apply Group Policy" permission for the group. ... It appears to me that if one chooses to block inheritance of a GP ...
    (microsoft.public.windows.group_policy)
  • Re: Start Windows Messenger for Net Send
    ... realized that it was set to block inheritance. ... BTW the GPMC shows a blue warning sign if inheritance is blocked afair. ... Windows XP picks up the new policy setting and applies it to this service. ... BTW. Windows Server 2003 shows a different behaviour. ...
    (microsoft.public.windows.group_policy)