GPO(Group Policy Object) in Windows Server 2008

Asked By 230 points N/A Posted on -

How to link GPO to a group or User in Server 2008 and how to block inheritance of GPO. If we block Inheritance it will automatically block default GPO Inheritance. So I don't know what to do.

I have tried a lot but failed. Please help me!

Best Answer by Mikael H
Best Answer
Best Answer
Answered By 5 points N/A #91378

GPO(Group Policy Object) in Windows Server 2008

Hi Nigel,
First of all lets see what is Group Policy and Group Policy Object. Group Policy is a one of the most useful tools found in the Windows 2000/2003 Active Directory infrastructure. Group Policy can help you do the following:
  • Configure user's desktops.
  • Configure local security on computers.
  • Install applications.
  • Run start-up/shut-down or logon/logoff scripts.
  • Configure Internet Explorer settings.
  • Redirect special folders.

GPO – Group Policy Object- Refers to the policy that is configured at the Active Directory level and is inherited by the domain member computers. You can configure a GPO – Group Policy Object – at the site level, domain level or OU level.

  • Linking a GPO
To link a GPO simply right click an OU and choose Link an existing GPO or you can create and link a GPO in the same time. You can also drag and drop a GPO from the Group Policy Objects folder to the appropriate Site, Domain or OU. When you right-click a link you can:
Edit a GPO- This will open the GPO window so you can configure settings.
Link/Unlink a GPO- This setting allows you to temporarily disable a link if you need to add settings to it or if you will activate it later.
  • Block/Enforce inheritance
You can block policy inheritance to an OU if you don’t want the settings from upper GPOs to configure your OU. To block GPO inheritance, simply right click your OU and choose "Block Inheritance". Blocking inheritance will block all upper GPOs. In case you need one of the upper GPOs to configure all downstream OUs and overcome Block inheritance, use the Enforce option of a link. Enforcing a GPO is a powerful option and rarely should be used. I hope this will answer your questions.
Answered By 0 points N/A #91379

GPO(Group Policy Object) in Windows Server 2008



Solution 1) GPO can be linked by a right click on OU (Organizational Unit) choosing “Link an existing GPO”.
Solution 2) Drag and drop a GPO from the group policy objects to where do you want to point the link.
Group Policy management

Blocking inheritance is simple, right click with your mouse on OU and choose “Block Inheritance” from the contextual menu appearing. Look at the following images that well explain the operation steps:


Block Inheritance




Group Policy Inheritence


Answered By 10 points N/A #91380

GPO(Group Policy Object) in Windows Server 2008



Group policy has the capability to configure user’s desktops. It also configures local security on computers. It also installs application software. It can run and shut down scripts, startups and logging on and off. At it also redirects special folders.

To link a GPO, here are the steps:

  • Right click an OU and choose ‘link an existing GPO’.
  • You can also create a link to a GPO at the same time.
  • Drag and drop also works for the GPO from the Group Policy Objects folder to the site, domain or OU.
  • If you right click, you can edit a GPO, link and unlink a GPO and block or enforce inheritance

Login/Register to Answer

Related Questions