gpo

Hi all, couldn't work it out myself so was hoping someone
could help, if you set a gpo at the domain level will that
automatically overwrite a gpo a the ou level, I'm finding
this a little confusing and am having trouble finding
words to describe what I mean but hopefully you'll get the
idea, thanks again for you help

Neil
Tue May 11 11:13:58 CDT 2004

"alex & ireland" <anonymous@discussions.microsoft.com> wrote in
news:b38301c43770$c0c7c940$a401280a@phx.gbl:

> Hi all, couldn't work it out myself so was hoping someone
> could help, if you set a gpo at the domain level will that
> automatically overwrite a gpo a the ou level, I'm finding
> this a little confusing and am having trouble finding
> words to describe what I mean but hopefully you'll get the
> idea, thanks again for you help
>

are you asking about the no override option? vs block inheritance?

--
Neil MCNGP #30
"you'd do what, to who, for how many biscuits?"

Network
Tue May 11 16:28:56 CDT 2004


>-----Original Message-----
>Hi all, couldn't work it out myself so was hoping someone
>could help, if you set a gpo at the domain level will
that
>automatically overwrite a gpo a the ou level, I'm finding
>this a little confusing and am having trouble finding
>words to describe what I mean but hopefully you'll get
the
>idea, thanks again for you help
>.
>A

Jtyc
Tue May 11 16:42:18 CDT 2004

A
E

jtyc
Tue May 11 16:43:26 CDT 2004


>-----Original Message-----
>
>>-----Original Message-----
>>Hi all, couldn't work it out myself so was hoping
someone
>>could help, if you set a gpo at the domain level will
>that
>>automatically overwrite a gpo a the ou level, I'm
finding
>>this a little confusing and am having trouble finding
>>words to describe what I mean but hopefully you'll get
>the
>>idea, thanks again for you help
>>.
>>A
>.
>S

LnkWizard
Tue May 11 16:45:17 CDT 2004

A
E
I

Jtyc
Tue May 11 16:49:49 CDT 2004

A
E
I
O

Jtyc
Tue May 11 16:50:09 CDT 2004

A
S
P

sj777abc
Tue May 11 20:30:20 CDT 2004

In short, yes.

Group Policy is applied locally, than at the Site, then the Domain,
then the Organizational Unit (OU) level. The last one applied is the
one that takes precedence. It's also important to remember that
policies inherit all settings from their parent. OU's inherit from
the domain; domain inherits from the site, etc.

Any conflicts between what was set at the domain level with a setting
at the OU level will be overridden by the OU. For example, if the
Control Panel is hidden by a Domain level GPO, but is shown by an OU
level GPO, then the Control Panel will show.

An exception is if the the higher level GPO (the domain level GPO in
the above example) is set for No Override. This would prevent the
lower level GPO from changing the setting.

The only exception is security account policy settings that are only
applied at the domain level.

HTH

sj
MCSE...
www.certquest.net

"alex & ireland" <anonymous@discussions.microsoft.com> wrote in message news:<b38301c43770$c0c7c940$a401280a@phx.gbl>...
> Hi all, couldn't work it out myself so was hoping someone
> could help, if you set a gpo at the domain level will that
> automatically overwrite a gpo a the ou level, I'm finding
> this a little confusing and am having trouble finding
> words to describe what I mean but hopefully you'll get the
> idea, thanks again for you help

Neil
Tue May 11 20:35:31 CDT 2004

"Jtyc" <jtyc_mcngp@spamblockerbitch!@yahoo.com> wrote in
news:e8tBjH6NEHA.1616@TK2MSFTNGP12.phx.gbl:

A
E
I
O
U




--
Neil MCNGP #30
"you'd do what, to who, for how many biscuits?"

Brat
Wed May 12 07:59:45 CDT 2004

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/management/gp/default.mspx

or

http://tinyurl.com/39v56

or another listing:

http://search.microsoft.com/search/results.aspx?st=b&View=en-us&s=5&c=0&qu=gpo

or

http://tinyurl.com/yuax4

in short... technet is your friend :)
(http://www.microsoft.com/technet/default.mspx)

and here is another great resource:

http://www.microsoft.com/windows2000/techinfo/reskit/en-us/default.asp

or (of course)

http://tinyurl.com/nmw


... you never said which version of server you were using... 2k or 2k3?
either way... check out the resources available to you above


--
Sue MCNGP #69
Proud member since April 8, 2002
"alex & ireland" <anonymous@discussions.microsoft.com> wrote in message
news:b38301c43770$c0c7c940$a401280a@phx.gbl...
> Hi all, couldn't work it out myself so was hoping someone
> could help, if you set a gpo at the domain level will that
> automatically overwrite a gpo a the ou level, I'm finding
> this a little confusing and am having trouble finding
> words to describe what I mean but hopefully you'll get the
> idea, thanks again for you help

Jtyc
Wed May 12 09:22:08 CDT 2004

> A
> E
> I
> O
> U

And sometimes Y.

billLASTINIT
Wed May 12 09:39:01 CDT 2004

Jtyc wrote:
>> A
>> E
>> I
>> O
>> U
>
> And sometimes Y.

Little GPO, you're really lookin' fine
Three deuces and a four-speed and a 389
Listen to her tachin' up now, listen to her why-ee-eye-ine
C'mon and turn it on, wind it up, blow it out GPO

Wa-wa, (mixed with "Yeah, yeah, little GPO") wa, wa, wa, wa, wa, wa
(mixed with "Yeah, yeah, little GPO")
Wa-wa, (mixed with "Yeah, yeah, little GPO") wa, wa, wa, wa, wa, wa
(mixed with "Yeah, yeah, little GPO")
Wa-wa (mixed with "Ahhh, little GPO") wa, wa, wa, wa, wa, wa

You oughta see her on a road course or a quarter mile
This little modified Pon-Pon has got plenty of style
She beats the gassers and the rail jobs, really drives 'em why-ee-eye-ild
C'mon and turn it on, wind it up, blow it out GPO

Wa-wa, (mixed with "Yeah, yeah, little GPO") wa, wa, wa, wa, wa, wa
(mixed with "Yeah, yeah, little GPO")
Wa-wa, (mixed with "Yeah, yeah, little GPO") wa, wa, wa, wa, wa, wa
(mixed with "Yeah, yeah, little GPO")
Wa-wa (mixed with "Ahhh, little GPO") wa, wa, wa, wa, wa, wa

Gonna save all my money (turnin' it on, blowin' it out) and buy a GPO
(turnin' it on,
blowin' it out)
Get a helmet and a roll bar (turnin' it on, blowin' it out) and I'll be
ready to go
(turnin' it on, blowin' it out)
Take it out to Pomona (turnin' it on, blowin' it out) and let 'em know
(turnin' it on,
blowin' it out), yeah, yeah
That I'm the coolest thing around
Little buddy, gonna shut you down
When I turn it on, wind it up, blow it out GPO

--
Fris "Vroom" bee®

Certaholics
http://groups.yahoo.com/group/certaholics

anonymous
Wed May 12 10:38:33 CDT 2004

thanks brat your a great help
>-----Original Message-----
>http://www.microsoft.com/technet/prodtechnol/windowsserver
2003/technologies/management/gp/default.mspx
>
>or
>
>http://tinyurl.com/39v56
>
>or another listing:
>
>http://search.microsoft.com/search/results.aspx?
st=b&View=en-us&s=5&c=0&qu=gpo
>
>or
>
>http://tinyurl.com/yuax4
>
>in short... technet is your friend :)
>(http://www.microsoft.com/technet/default.mspx)
>
>and here is another great resource:
>
>http://www.microsoft.com/windows2000/techinfo/reskit/en-
us/default.asp
>
>or (of course)
>
>http://tinyurl.com/nmw
>
>
>.... you never said which version of server you were
using... 2k or 2k3?
>either way... check out the resources available to you
above
>
>
>--
>Sue MCNGP #69
>Proud member since April 8, 2002
>"alex & ireland" <anonymous@discussions.microsoft.com>
wrote in message
>news:b38301c43770$c0c7c940$a401280a@phx.gbl...
>> Hi all, couldn't work it out myself so was hoping
someone
>> could help, if you set a gpo at the domain level will
that
>> automatically overwrite a gpo a the ou level, I'm
finding
>> this a little confusing and am having trouble finding
>> words to describe what I mean but hopefully you'll get
the
>> idea, thanks again for you help
>
>
>.
>

anonymous
Wed May 12 14:31:30 CDT 2004

I think You should also add the block inherittance and
the ability to deny read access to that GPO if you can't
read it you cant apply it. although that can make your GPO
structure very hairy. it is still an option although not
recommened. unless you have no other options.
>-----Original Message-----
>In short, yes.
>
>Group Policy is applied locally, than at the Site, then
the Domain,
>then the Organizational Unit (OU) level. The last one
applied is the
>one that takes precedence. It's also important to
remember that
>policies inherit all settings from their parent. OU's
inherit from
>the domain; domain inherits from the site, etc.
>
>Any conflicts between what was set at the domain level
with a setting
>at the OU level will be overridden by the OU. For
example, if the
>Control Panel is hidden by a Domain level GPO, but is
shown by an OU
>level GPO, then the Control Panel will show.
>
>An exception is if the the higher level GPO (the domain
level GPO in
>the above example) is set for No Override. This would
prevent the
>lower level GPO from changing the setting.
>
>The only exception is security account policy settings
that are only
>applied at the domain level.
>
>HTH
>
>sj
>MCSE...
>www.certquest.net
>
>"alex & ireland" <anonymous@discussions.microsoft.com>
wrote in message news:<b38301c43770$c0c7c940
$a401280a@phx.gbl>...
>> Hi all, couldn't work it out myself so was hoping
someone
>> could help, if you set a gpo at the domain level will
that
>> automatically overwrite a gpo a the ou level, I'm
finding
>> this a little confusing and am having trouble finding
>> words to describe what I mean but hopefully you'll get
the
>> idea, thanks again for you help
>.
>