Home Active Directory (III) 6. Planning and Managing Group Policy 6.4 Managing Inheritance and Filtering of GPOs in Active Directory

6.4 Managing Inheritance and Filtering of GPOs in Active Directory

Marţi, 18 August 2009 16:33 Eugen Morar
Email

In this video i will show you how to manage Inheritance and Filtering of GPOs in Active Directory.

 

This exercise walks you through the steps you need to take to manage inheritance and filtering of GPOs.
  1. In the Active Directory Users And Computers tool, create a top-level OU called Parent.
  2. Right-click the Parent OU and select Properties. Select the Group Policy tab and click the New button to create a new GPO. Name the new object Master GPO.
  3. Click the Options button on the Group Policy tab.
  4. On the Master GPO Options dialog box, place a check mark next to the No Override option. This ensures that administrators of OUs contained within the Parent OU will not be able to override the settings defined in this GPO. To save the settings, click OK. Notice that a check mark appears next to the Master GPO in the No Override column in the list of Group Policy object links.
  5. On the Group Policy tab of the Parent OU Properties dialog box, create another GPO and name it Optional GPO. Click the OK button to save the changes.
  6. Within the Parent OU, create another OU called Child.
  7. Right-click the Child OU and select Properties.
  8. Select the Group Policy tab, and place a check mark in the Block Policy Inheritance checkbox. This option prevents the inheritance of GPO settings from the Parent OU for the Optional GPO settings. Note that since the No Override setting for the Master GPO was enabled on the Parent OU, the settings in the Master GPO will take effect on the Child OU regardless of the setting of the Block Policy Inheritance box. Click OK to save the changes.