 |
|
| > |
QUESTION POSED ON: 04 April 2004
Are group policies cumulative? - If a GP is assigned to the domain and then a separate GP is assigned to an OU, do features of the domain GP filter down to the OU and apply with features set in the OU GP as long as they don't conflict? I thought that if a GP was assigned to an OU its features would overwrite any features set by a GP assigned to a level above.
|
|
| > |
EXPERT RESPONSE
If you have no GPOs that "conflict" anywhere in your SOM (scope of management), they will apply cumulatively. However, if you have a GPO which says to do one specific thing at, say, the Domain level and another GPO which ways to do a specific thing at, say the OU level, the one "closer" to the user (or computer) will apply. So, here's a simple example: At the domain level, imagine that you restrict the control panel, but at the OU level, you make it available. Since the GPO linked to the OU is "closer" to the target account, that "affect" will take effect.
|
|
|
|
|
|
|
|
Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and
answer pairs from more than 250 TechTarget industry experts.
|
|
|
|
|
|
|
|
|
|
|
|
