.png?width=100&auto=webp&quality=80&disable=upscale "Picture of John Savill")
.png?width=400&auto=webp&quality=80&disable=upscale "John Savill")
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
How does the Group Policy 'No Override' and 'Block Inheritance' work?
John Savill
July 26, 2000
1 Min Read
A. GroupPolicies can be applied at multiple levels (Sites, domains, organizationalUnits) and multiple GP's for each level. Obviously it may be that some policysettings conflict hence the application order of Site - Domain - OrganizationUnit and within each layer you set order for all defined policies but you maywant to force some polices to never be overridden (No Override) and you may wantsome containers to not inherit settings from a parent container (BlockInheritance).
A good definition of each is as follows:
No Override - This prevents child containers from overriding policies set athigher levels
Block Inheritance - Stops containers inheriting policies from parentcontainers
No Override takes precedence over Block Inheritance so if a child containerhas Block Inheritance set but on the parent a group policy has No Override setthen it will get applied.
Also the highest No Override takes precedence over lower No Override's set.
To block inheritance perform the following:
Start the Active Directory Users and Computer snap-in (Start - Programs - Administrative Tools - Active Directory Users and Computers)
Right click on the container you wish to stop inheriting settings from its parent and select Properties
Select the 'Group Policy' tab
Check the 'Block Policy inheritance' option
Click here to view imageClick Apply then OK
To set a policy to never be overridden perform the following:
Start the Active Directory Users and Computer snap-in (Start - Programs - Administrative Tools - Active Directory Users and Computers)
Right click on the container you wish to set a Group Policy to not be overridden and select Properties
Select the 'Group Policy' tab
Click Options
Check the 'No Override' option
Click OK
Click Apply then OK
About the Author
You May Also Like
