If certain OU's need to not get the domain policies pushed down upon them, you would want to block inheritance. Perhaps your domain policies aren't as strict as the Finance folks want their security to be. Put them in their own OU and block inheritance, then set up a policy on that OU specifically. Or, maybe your web-heads want less stringent policies for their folks. Force them to move those machines to a dev network... er... I mean block inheritance and create a policy for their OU ;^)
-----Original Message----- From: John Balos [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 25, 2003 11:54 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Policy Inheritance Can someone please explain to me when I would want to use 'block policy inheritance' and why or why not I would want to use this option? Thanks, John List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
