You say "Obvious" but is this obvious? What
happens in the case of password policy. This can only be set at the top level of
the domain. Does this block actually prevent it being applied? I would guess
that is does, but I wonder if any one has tested it or has any docs on what actually happens.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Darren Mar-Elia Well,
the obvious effect is that it prevents domain-linked policies from being
delivered correctly, including password policy. This is probably not desirable.
I can't think of a good scenario where this would be useful. Darren From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of WATSON, BEN The company I am currently working for has “block
inheritance” enabled for the Domain Controller’s OU and apparently whoever
enabled this setting is no longer with the company (or they won’t fess up to why
they did this). Although I am curious, what sort of ramifications does enabling “block inheritance” on the Domain Controller’s OU pose? And what
reason would you have to enable this setting on the Domain Controller’s
OU? With any other OU, it would be fairly obvious, but being that these
are the Domain Controllers it would seem to be a unique
situation. Thanks as always for your input, ~Ben ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. As a public body, the Council may be required to disclose this email, or any response to it, under the Freedom of Information Act 2000, unless the information in it is covered by one of the exemptions in the Act. If you receive this email in error please notify Stockport e-Services via [EMAIL PROTECTED] and then permanently remove it from your system. Thank you. http://www.stockport.gov.uk ********************************************************************** |
- RE: [ActiveDir] Block Inheritance on DC OU Dave Wade
- RE: [ActiveDir] Block Inheritance on DC OU Derek Harris
- RE: [ActiveDir] Block Inheritance on DC OU Darren Mar-Elia
- Re: [ActiveDir] Block Inheritance on DC OU Paul Williams
- RE: [ActiveDir] Block Inheritance on DC OU Dave Wade
- Re: [ActiveDir] Block Inheritance on DC OU Kamlesh Parmar
- RE: [ActiveDir] Block Inheritance on DC OU Derek Harris
- RE: [ActiveDir] Block Inheritance on DC OU Darren Mar-Elia