Information Technology Reference
In-Depth Information
Normally, organizational units (OUs) inherit Group Policy from higher sites, domains, or OUs.
However, you can block this inheritance in the GPMC by following these steps:
1.
Open the GPMC and expand the console tree to display the domain for which you
want to change inheritance.
To block inheritance for the entire domain and all its OUs, right-click the domain name
and select Block Inheritance from the menu.
2.
To block inheritance for an OU, expand the domain and then right-click the OU and
select Block Inheritance from the context menu, as shown in Figure 6-3.
3.
FIGURE 6-3
Blocking inheritance
NOTE
ENFORCED GPOS
GPO links that are set to Enforced can't be blocked from inheritance. When you block
inheritance to a domain or OU, unenforced GPOs are not inherited by the domain or OU,
but GPOs that are set to Enforced are still inherited.
