Hi Russ...
Enforced overrides Block Inheritance....
Enforced means run always and last really. You shouldn't even need the
block. Should run last by default without the enforced.
John
"Rimmerman, Russ"
<[EMAIL PROTECTED]
rcameron.com> To
Sent by: <[email protected]>
[EMAIL PROTECTED] cc
ail.activedir.org
Subject
[ActiveDir] GPO oddity
05/31/2005 08:25
AM
Please respond to
[EMAIL PROTECTED]
tivedir.org
We have a Default Domain level GPO that is set to "Enforced". In this
GPO, we set a 120 minute screensaver timeout that locks the screensaver
after 120 minutes.
In a GPO at a lower OU level, we have an OU that has "Block Policy
Inheritence" turned on, and a GPO is linked to that OU that sets the
screensaver timeout to 3 minutes.
For some reason, the users in that OU are getting the default domain GPO
timeout of 120 minutes rather than the 3 minute screensaver timeout.
I assume if we turn off "Enforced" on the default domain GPO, anyone
that belongs to a Block Policy Inheritence OU will get their lower level
GPO applied rather than the default domain GPO?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This e-mail is confidential, may contain proprietary information
of the Cooper Cameron Corporation and its operating Divisions
and may be confidential or privileged.
This e-mail should be read, copied, disseminated and/or used only
by the addressee. If you have received this message in error please
delete it, together with any attachments, from your system.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
