RE: [ActiveDir] Which GPO Prevails

[Darren Mar-Elia]

Title: Message

George- Yes, if you set policy in both the Default Domain and Default Domain Controllers GPOs, then what applies to your domain controllers is any policy from the Default Domain GPO that does not conflict with policy in the Default Domain Controllers GPO. That is, you will get the sum of both to the extent that the one processed first--the Default Domain Policy--does not conflict with the one processed second--the Default Domain Controllers policy. The exception to this is Account Policy, which can only be set within a domain-linked GPO.   If you set block inheritance on the Domain Controllers OU then, yes, any upstream GPOs linked to the domain or even a site will not be processed (unless they are set to No override).     -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of george.arezina Sent: Monday, October 13, 2003 3:28 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Which GPO Prevails Alright, If I configure the Default Domain Policy and the Default Domain Controllers Policy does that mean that the sum of their policies applies? What I would like to know as well, if I block inheritance on the Default Domain Controllers Policy and configure it, will I definitely block Default Domain Policy settings and have only Default Domain Controllers Policy settings that I configured? Thanks        George Arezina BA, A+, Net+, MCSE 2000 Information Technology Consultant National Bank of Serbia Pop Lukina 7-9, 11000 Belgrade. * E-mail: [EMAIL PROTECTED] ( Phone:+381 (11) 3202-474 ( GSM:  +381 (63)  342-321

<<image001.jpg>>