1

Hello All,

I need some help regarding some testing I’m doing with group policies. Here is the OU structure:

Parent OU (GPO: Test1, Test2 and Test3)

Child OU (GPO: Test1, Test2 and Test3)

As you can see, child OU is inheriting GPO from parent OU. Currently, If I make any change to child OU GPO, It will have a global effect.

Scenario: disabling the inheritance on Child OU

Is it going to just break the link between child and parent OU GPO (any change made to child OU will not effect parent OU)?

Or is it going to completely remove all parents OU GPO from child OU?

I still want to keep same GPO in child OU but just need to break the link between them. please advise.

2 Spice ups
2

A GPO can have multiple links but it is still the same GPO. Any modifications done to that GPO will change in all locations where that GPO is linked.

You can create a new GPO and link it only to the child OU and it will not have any effect on the parent OU.

6 Spice ups
3

When you disable inheritance, no upstream GPO will apply unless it is enforced. You would have to link the GPO’s you would like directly to the OU.

2 Spice ups
4

In Group Policy Management, you should see a folder that says “Group Policy Objects.” Those are the actual policies, that’s what you are changing whether you edit it from this folder or from one of your OUs. If your goals is to modify policies that only affect the child OU, you would disable inheritance but also there needs to be separate policy objects to modify. Does that make sense?

1 Spice up
5

Thank you for all your help! i think my best bet is to create another policy for child OU which will take precedence over the other GPO. Thank you all!

1 Spice up