RE: [ActiveDir] Block Inheritance on DC OU

[Dave Wade]

It prevents you locking yourself out of DC's due to policy being applied at the domain level. I think its a "good thing". Only trouble is I am not sure it protects against site policies. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of WATSON, BEN Sent: 13 September 2006 17:37 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Block Inheritance on DC OU The company I am currently working for has “block inheritance” enabled for the Domain Controller’s OU and apparently whoever enabled this setting is no longer with the company (or they won’t fess up to why they did this).   Although I am curious, what sort of ramifications does enabling “block inheritance” on the Domain Controller’s OU pose?  And what reason would you have to enable this setting on the Domain Controller’s OU?  With any other OU, it would be fairly obvious, but being that these are the Domain Controllers it would seem to be a unique situation.   Thanks as always for your input, ~Ben ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. As a public body, the Council may be required to disclose this email, or any response to it, under the Freedom of Information Act 2000, unless the information in it is covered by one of the exemptions in the Act. If you receive this email in error please notify Stockport e-Services via [EMAIL PROTECTED] and then permanently remove it from your system. Thank you. http://www.stockport.gov.uk **********************************************************************