005 12:42
PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir]
override default domain policy
Personally, instead of blocking the default domain policy I
would create seperate policy objects with the settings that I wanted
filtered/blocked. But your "set policies on each domain"
Personally, instead of blocking the default domain policy I
would create seperate policy objects with the settings that I wanted
filtered/blocked. But your "set policies on each domain" leads me to
believe that there are multiple domains in the forest involved here?
Domains by their nature
In general, any GPO linked to the domain will have
conflicting settings overriden if a container (OU) down the tree sets block
inheritance. The DDP is no different. However, some policies, like account
policy, will not be affected by block inheritance on regulard OUs since it
will be process
