General discussion

Locked

Group Policy Inheritance in Child Domain

By Tictag ·
Is a child domain within ADS a child object of the root domain?

I want to apply a root domain group policy to all child domains (i.e. apply test.local policy to child1.test.local & child2.test.local).

Now the only way I have managed this is tolink the root domain policy to the child domains. If the child domains are considered to be child objects of the root domain, should the root domain GPO be applied to them, in Microsoft?s terms, ?by design??

Regards,
Tictag.

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Group Policy Inheritance in Child Domain

by timwalsh In reply to Group Policy Inheritance ...

The short answer is that child domains are not considered child objects of the root domain as far as Group Policy is concerned "by design."

The usual purpose of having separate domains is to allow separate administrative control (to include Group Policy). By having the root domain Group Policy propogated throughout all child domains, you effectively take local administration out of the hands of the local domain administrator (there can be only ONE domain policy). If you wish to centrallymanage all computers, then go with one domain.

Collapse -

Group Policy Inheritance in Child Domain

by Tictag In reply to Group Policy Inheritance ...

Many thanks - A fundamental concept that I really need to tie down.
Tictag.

Collapse -

Group Policy Inheritance in Child Domain

by Tictag In reply to Group Policy Inheritance ...

This question was closed by the author

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums