Re: [ActiveDir] Block Inheritance on DC OU

2006-09-16 Thread Kamlesh Parmar
PMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Block Inheritance on DC OU Well at one of the customers, they have around 10 to 15 GPOs applied at domain level, for various purposes ranging from software deployment to other settings.So they didn't wanted many of those GPOs to be applied

RE: [ActiveDir] Block Inheritance on DC OU

2006-09-15 Thread Dave Wade
something odd must happen. Dave. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: 15 September 2006 00:44 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Block Inheritance on DC OU To me it seems intuitive that GP processing

Re: [ActiveDir] Block Inheritance on DC OU

2006-09-15 Thread Kamlesh Parmar
scenario where this would be useful. Darren From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of WATSON, BENSent: Wednesday, September 13, 2006 9:37 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Block Inheritance on DC OU The company I am currently working for has

RE: [ActiveDir] Block Inheritance on DC OU

2006-09-15 Thread Darren Mar-Elia
@mail.activedir.org Sent: 9/15/2006 1:38 PM Subject: Re: [ActiveDir] Block Inheritance on DC OU Well at one of the customers, they have around 10 to 15 GPOs applied at domain level, for various purposes ranging from software deployment to other settings. So they didn't wanted many of those GPOs

RE: [ActiveDir] Block Inheritance on DC OU

2006-09-15 Thread Derek Harris
PMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Block Inheritance on DC OU Well at one of the customers, they have around 10 to 15 GPOs applied at domain level, for various purposes ranging from software deployment to other settings.So they didn't wanted many of those GPOs

RE: [ActiveDir] Block Inheritance on DC OU

2006-09-15 Thread Darren Mar-Elia
, September 15, 2006 2:38 PMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Block Inheritance on DC OU Well at one of the customers, they have around 10 to 15 GPOs applied at domain level, for various purposes ranging from software deployment to other settings.So they didn't wanted many of those

RE: [ActiveDir] Block Inheritance on DC OU

2006-09-15 Thread Darren Mar-Elia
to prefer it over blocking or enforcing. d. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: Friday, September 15, 2006 6:24 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Block Inheritance on DC OU For a point / counter point kind of discussion. I am

RE: [ActiveDir] Block Inheritance on DC OU

2006-09-15 Thread joe
, September 15, 2006 10:02 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Block Inheritance on DC OU I hear you joe. I think it depends upon the environment and its goals. I'm generally against implicit stuff like blocking flags because its hard for people to troubleshoot. I'm also

RE: [ActiveDir] Block Inheritance on DC OU

2006-09-14 Thread Grillenmeier, Guido
. /Guido From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Wednesday, September 13, 2006 6:59 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Block Inheritance on DC OU Well, the obvious effect is that it prevents domain-linked

RE: [ActiveDir] Block Inheritance on DC OU

2006-09-14 Thread Dave Wade
t actually happens. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-EliaSent: Wednesday, September 13, 2006 6:59 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Block Inheritance on DC OU Well, the obvious effect is that it prevents domain-linked policies

RE: [ActiveDir] Block Inheritance on DC OU

2006-09-14 Thread Derek Harris
: RE: [ActiveDir] Block Inheritance on DC OU You say "Obvious" but is this obvious? What happens in the case of password policy. This can only be set at the top level of the domain. Does this block actually prevent it being applied? I would guess that is does, but I wonder if any one

RE: [ActiveDir] Block Inheritance on DC OU

2006-09-14 Thread Darren Mar-Elia
: Derek Harris [EMAIL PROTECTED] To: ActiveDir@mail.activedir.org Sent: 9/14/2006 4:11 PM Subject: RE: [ActiveDir] Block Inheritance on DC OU I did it a couple years ago, and found out that it does block the password policy. It seems intuitive that it shouldn't, but it does

[ActiveDir] Block Inheritance on DC OU

2006-09-13 Thread WATSON, BEN
The company I am currently working for has block inheritance enabled for the Domain Controllers OU and apparently whoever enabled this setting is no longer with the company (or they wont fess up to why they did this). Although I am curious, what sort of ramifications does enabling block

RE: [ActiveDir] Block Inheritance on DC OU

2006-09-13 Thread Darren Mar-Elia
Of WATSON, BENSent: Wednesday, September 13, 2006 9:37 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Block Inheritance on DC OU The company I am currently working for has block inheritance enabled for the Domain Controllers OU and apparently whoever enabled this setting is no longer