Group Policy Inheritence Question

JonathanF

Distinguished
Jun 2, 2001
97
0
18,630
Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi ,
I wonder if anyone can help, we have two servers "domain controllers" one
is in shropshire and the other in kent. I have separated authentication on
these two servers so the clients log on locally but the default domain policy
is being inherited from the (PDC) in shropshire , can I stop this. I know
their is a block policy inheritence checkbox on the group policy screen but
does this allow me to be able to specify separate policies for each site.

Any advice would be much appreciated.
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.group_policy (More info?)

You should not be trying to stop the default domain policy from applying
throughout the domain, that's what it's supposed to do. If there are certain
settings in the default domain policy applying to one site and you don't
want them to you should remove these settings from the policy and define
them at the OU level instead. (I am guessing each site has its own OU)

"jonathanf" <jonathanf@discussions.microsoft.com> wrote in message
news:F53A08C8-87D9-4B57-90FC-4447DFD71516@microsoft.com...
> Hi ,
> I wonder if anyone can help, we have two servers "domain controllers" one
> is in shropshire and the other in kent. I have separated authentication
> on
> these two servers so the clients log on locally but the default domain
> policy
> is being inherited from the (PDC) in shropshire , can I stop this. I know
> their is a block policy inheritence checkbox on the group policy screen
> but
> does this allow me to be able to specify separate policies for each site.
>
> Any advice would be much appreciated.