General discussion

Locked

GPO

By cceven ·
I've applied GPO at a OU and the the GPO is inherited by "sub" OU's. However some users in the "sub" OU's are not affected by the GPO I've created. I've checked all the settings in this "sub" OU and block inheritence is not enabled and the permissions are set to read and apply for domain users. I've moved some user accounts to an OU where all users are affect by the GPO but still the users I moved is not affected by the GPO.

Thank You

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

GPO

by savatovic In reply to GPO

Some hints:
1. GPO does not apply to administrators.
2. GPO's at various levels combine to form effective settings. The order is:
- Site (applied first)
- Domain
- OU (applied last)
3. If there is conflict between user and computer policy, thecomputer policy usually wins.
4. GP has ability to detect slow links (less than 500 kbps). In that case, the following settings are turned off (by default):
- IE Maintenance
- Software installation
- Folder Redirection
- Script settings
- IPSec settings
- Disk Quota settings
5. If there are more GPO's in one container, the settings which are highest in the list apply
6. And of course check inheritance and override settings.

Collapse -

GPO

by cceven In reply to GPO

The question was auto-closed by TechRepublic

Collapse -

GPO

by abubin In reply to GPO

The answer provided by savatovic is completed out!!!

Here is the quote :

"1. GPO does not apply to administrators. "
A : NO WAY!!! GPO by default applies to Authenticated Users and administrators are also Authenticated Users! Any users who logon to the domain where the GPO is applied is Authenticated Users!

"2. GPO's at various levels combine to form effective settings. The order is:
- Site (applied first)
- Domain
- OU (applied last) "
A : This is totally the opposite. GPO is applied in this way :
- Local computer (applied first)
- domain user
- OU
- domain
- site (applied last)
Those applied later will overwrite those applied first when there are conflicting policies. For eg. if OU set password to 30days and domainset password to 15days, password will be 15days.

"3. If there is conflict between user and computer policy, the computer policy usually wins. "
A : Another crap. Computer policy is the FIRST policy to be applied thus the least significant.

"4. GP has ability to detect slow links (less than 500 kbps). In that case, the following settings are turned off (by default):
- IE Maintenance
- Software installation
- Folder Redirection
- Script settings
- IPSec settings
- Disk Quota settings "

A : yes, it does have settings for slow links connection but I am not sure the above is correct. No further comment since don't recall much about this feature.

"5. If there are more GPO's in one container, the settings which are highest in the list apply "
A : At least this is correct. But the comment is already written on the menu!! The policies are applied from bottom to up. So, highest will have priority.

"6. And of course check inheritance and override settings. "
Hmm.....

I guess this guy must drunk when he is posting the answers seeing that he is a 10k techie.

Collapse -

GPO

by cceven In reply to GPO

The question was auto-closed by TechRepublic

Collapse -

GPO

by cceven In reply to GPO

This question was auto closed due to inactivity

Back to Windows Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums