When you "enforce" a group plicy what does that mean?

Discussion in 'Active Directory' started by Spin, Feb 25, 2006.

  1. Spin

    Spin Guest

    When you "enforce" a group policy what does that mean? Does it mean you are
    basically enabling the link between it and whatever OU it is assigned to?
    Does anyone do anything clever with this feature?
     
    Spin, Feb 25, 2006
    #1
    1. Advertisements

  2. In the GPMC an enforced link means that a lower level GPO (linked to sub
    OUs) cannot override its settings

    --

    Cheers,
    (HOPEFULLY THIS INFORMATION HELPS YOU!)

    # Jorge de Almeida Pinto # MVP Windows Server - Directory Services

    BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
     
    Jorge de Almeida Pinto [MVP], Feb 25, 2006
    #2
    1. Advertisements

  3. Spin

    Ray Guest

    It's called "No override" before if I'm not wrong.

    That means, the settings in the policy cannot be overrided if the same
    settings are in the following policies. Correct me please.

    Ray
     
    Ray, Feb 26, 2006
    #3
  4. Spin

    Spin Guest

    Thanks. There is another setting called "Link Enabled". What is the
    relationship to that setting?

    --
    Spin

    "Jorge de Almeida Pinto [MVP]"
     
    Spin, Feb 26, 2006
    #4
  5. you can still link a GPO to an OU, but have the link disabled where the GPO
    will not be applied

    --

    Cheers,
    (HOPEFULLY THIS INFORMATION HELPS YOU!)

    # Jorge de Almeida Pinto # MVP Windows Server - Directory Services

    BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
    -----------------------------------------------------------------------------
    * This posting is provided "AS IS" with no warranties and confers no rights!
    * Always test before implementing!
    -----------------------------------------------------------------------------


    -----------------------------------------------------------------------------
     
    Jorge de Almeida Pinto [MVP], Feb 26, 2006
    #5
  6. Spin

    Spin Guest

    I can see where this may be useful in situations where a senior engineer
    "pre-stages" a GPO, but doesn't "link-enable" it until after-hours.

    --
    Spin

    "Jorge de Almeida Pinto [MVP]"
     
    Spin, Feb 26, 2006
    #6
  7. In
    As Jorge mentioned, a "No Override" on a parent GPO means to ignore any
    inheritance blocks on a child GPO. In the GPMC, it's called "Enforce".


    --
    Ace

    This posting is provided "AS-IS" with no warranties or guarantees and
    confers no rights.

    Having difficulty reading or finding responses to your post?
    Instead of the website you're using, I suggest to use OEx (Outlook Express
    or any other newsreader), and configure a news account, pointing to
    news.microsoft.com. This is a direct link to the Microsoft Public
    Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
    to easily find, track threads, cross-post, sort by date, poster's name,
    watched threads or subject.

    It's easy:
    How to Configure OEx for Internet News
    http://support.microsoft.com/?id=171164

    Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
    Microsoft MVP - Directory Services
    Microsoft Certified Trainer

    Assimilation Imminent. Resistance is Futile
    Infinite Diversities in Infinite Combinations

    "Very funny Scotty. Now, beam down my clothes."

    The only thing in life is change. Anything more is a blackhole consuming
    unnecessary energy.
     
    Ace Fekay [MVP], Feb 26, 2006
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.