PMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Block Inheritance on DC OU
Well at one of the customers, they have around 10 to 15 GPOs applied at domain level, for various purposes ranging from software deployment to other settings.So they didn't wanted many of those GPOs to be applied
something odd must happen.
Dave.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia
Sent: 15 September 2006 00:44
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Block Inheritance on DC OU
To me it seems intuitive that GP processing
Well at one of the customers, they have around 10 to 15 GPOs applied at domain level, for various purposes ranging from software deployment to other settings.So they didn't wanted many of those GPOs to be applied to domain controllers.
Above that, they have block inheritance enabled at various
@mail.activedir.org
Sent: 9/15/2006 1:38 PM
Subject: Re: [ActiveDir] Block Inheritance on DC OU
Well at one of the customers, they have around 10 to 15 GPOs applied at
domain level, for various purposes ranging from software deployment to other
settings.
So they didn't wanted many of those GPOs
PMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Block
Inheritance on DC OU
Well at one of the customers, they have around 10 to 15 GPOs applied
at domain level, for various purposes ranging from software deployment to other
settings.So they didn't wanted many of those GPOs
, September 15, 2006 2:38 PMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Block
Inheritance on DC OU
Well at one of the customers, they have around 10 to 15 GPOs applied
at domain level, for various purposes ranging from software deployment to other
settings.So they didn't wanted many of those
to prefer it over blocking or enforcing.
d.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
joeSent: Friday, September 15, 2006 6:24 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Block
Inheritance on DC OU
For a point / counter point kind of discussion. I am
, September 15, 2006 10:02 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Block
Inheritance on DC OU
I hear you joe. I think it depends upon the environment and
its goals. I'm generally against implicit stuff like blocking flags because its
hard for people to troubleshoot. I'm also
.
/Guido
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, September 13, 2006 6:59 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Block Inheritance on DC OU
Well, the obvious effect is that it prevents domain-linked
t actually happens.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Darren Mar-EliaSent: Wednesday, September 13,
2006 6:59 PMTo: ActiveDir@mail.activedir.orgSubject: RE:
[ActiveDir] Block Inheritance on DC OU
Well,
the obvious effect is that it prevents domain-linked policies
: RE: [ActiveDir] Block
Inheritance on DC OU
You say "Obvious" but is this obvious? What
happens in the case of password policy. This can only be set at the top level of
the domain. Does this block actually prevent it being applied? I would guess
that is does, but I wonder if any one
: Derek Harris [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Sent: 9/14/2006 4:11 PM
Subject: RE: [ActiveDir] Block Inheritance on DC OU
I did it a couple years ago, and found out that it does block the
password policy. It seems intuitive that it shouldn't, but it does
Well, the obvious effect is that it prevents domain-linked
policies from being delivered correctly, including password policy. This is
probably not desirable. I can't think of a good scenario where this would be
useful.
Darren
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
13 matches
Mail list logo
