I have a policy at the root of my domain called Default Domain Policy that doesn’t limit USB and in a child OU I have a separate policy applied to disable USB storage devices for specific workstations.
The Default Domain Policy gets inherited by the same OU that has the policy applied to disable USB on specific workstations.
This technet article says, “If multiple GPOs attempt to set a setting to conflicting values, the GPO with the highest precedence sets the setting.”(http://technet.microsoft.com/en-us/library/cc757050(WS.10).aspx?ppud=4)
According to the article the Default Domain Policy will have a higher precedence, so does that mean that the Disable USB Policy will be ignored since its settings conflict with the Default Domain Policy?
This is a Windows 2003 domain with Windows XP workstations.