GPO(Group Policy Object) in Windows Server 2008

Asked By Nigel 230 points N/A Posted on - 05/10/2011

How to link GPO to a group or User in Server 2008 and how to block inheritance of GPO. If we block Inheritance it will automatically block default GPO Inheritance. So I don't know what to do.

I have tried a lot but failed. Please help me!

• Status: Open
• Question Views: 1665
• Answer Count: 3
• Vote Up 23 Vote Down

• Answer Accepted: Yes
• Question Category: Windows 2008

Best Answer by Mikael H

Go To Solution

Best Answer

Best Answer

Answered By Mikael H 5 points N/A #91378

GPO(Group Policy Object) in Windows Server 2008

Hi Nigel,

 

First of all lets see what is Group Policy and Group Policy Object. Group Policy is a one of the most useful tools found in the Windows 2000/2003 Active Directory infrastructure. Group Policy can help you do the following:

 

• Configure user's desktops.
• Configure local security on computers.
• Install applications.
• Run start-up/shut-down or logon/logoff scripts.
• Configure Internet Explorer settings.
• Redirect special folders.

GPO – Group Policy Object- Refers to the policy that is configured at the Active Directory level and is inherited by the domain member computers. You can configure a GPO – Group Policy Object – at the site level, domain level or OU level.

• Linking a GPO

 

To link a GPO simply right click an OU and choose Link an existing GPO or you can create and link a GPO in the same time. You can also drag and drop a GPO from the Group Policy Objects folder to the appropriate Site, Domain or OU. When you right-click a link you can:

 

Edit a GPO- This will open the GPO window so you can configure settings.

 

Link/Unlink a GPO- This setting allows you to temporarily disable a link if you need to add settings to it or if you will activate it later.

 

• Block/Enforce inheritance

 

You can block policy inheritance to an OU if you don’t want the settings from upper GPOs to configure your OU. To block GPO inheritance, simply right click your OU and choose "Block Inheritance". Blocking inheritance will block all upper GPOs. In case you need one of the upper GPOs to configure all downstream OUs and overcome Block inheritance, use the Enforce option of a link. Enforcing a GPO is a powerful option and rarely should be used. I hope this will answer your questions.

About Mikael H

Questions
0

Answers
9

Best Answers
6

• Vote Up 0 Vote Down

• Posted on - 05/15/2011
• Question Category: Windows 2008

Answered By Mark Smith 0 points N/A #91379

GPO(Group Policy Object) in Windows Server 2008

 

Solution 1) GPO can be linked by a right click on OU (Organizational Unit) choosing “Link an existing GPO”.

 

Solution 2) Drag and drop a GPO from the group policy objects to where do you want to point the link.

Blocking inheritance is simple, right click with your mouse on OU and choose “Block Inheritance” from the contextual menu appearing. Look at the following images that well explain the operation steps:

 

 

 

 

About Mark Smith

Questions
0

Answers
14

Best Answers
2

• Vote Up 0 Vote Down

• Posted on - 08/02/2011
• Question Category: Windows 2008

Answered By waleed107 10 points N/A #91380

GPO(Group Policy Object) in Windows Server 2008

Hi,

Group policy has the capability to configure user’s desktops. It also configures local security on computers. It also installs application software. It can run and shut down scripts, startups and logging on and off. At it also redirects special folders.

To link a GPO, here are the steps:

• Right click an OU and choose ‘link an existing GPO’.
• You can also create a link to a GPO at the same time.
• Drag and drop also works for the GPO from the Group Policy Objects folder to the site, domain or OU.
• If you right click, you can edit a GPO, link and unlink a GPO and block or enforce inheritance

About waleed107

Questions
1

Answers
10

Best Answers
0

• Vote Up 0 Vote Down

• Posted on - 02/07/2013
• Question Category: Windows 2008