Windows

Question

OU GPO Override is not Overriding Domain's GPO

By tsantana1 ·
Following up with class in which we are making an Google Chrome Settings Override GPO for a local group -- added it at the group level; not the higher domain level. This should override the domain's (high-level) GPO that prevents downloads, prevents incognito mode, and restrict access to netflix.com. This is according to Windows' Group Policy API documentation (https://docs.microsoft.com/en-us/previous-versions/windows/desktop/policy/overriding-and-blocking-group-policy).

When looking at the group's "Group Policy Inheritance" tab in the Group Policy Management tool from the Server Manager (Wins 2012), I am seeing that the override GPO takes precedence over the previously applied restrictive settings from the higher domain policy. This is what we want.

However, when logged into a domain client -- with the credentials of the intended local group member -- the local group policy is not listed in Chrome://policy. The browser is still blocking netflix.com, downloads, and the use of incognito mode.

I restarted the client computer many times and ran the gpupdate /force script and successfully updated the policy several times. I also went as far as to enforced the GPO in the inheritance table for the local group taken precedence over all other GPOs.

Nothing is happening. HELP!
Thread display: Collapse - | Expand +

All Answers

Share your knowledge

Related Discussions

Related Forums