Block GPO Inheritance
-
Where have you applied it to? Domain level or lower?
-
@Brains Open group policy management
Right click OU
Enable block inheritance -
@nadnerB applied at the OU
-
is there a way to set password policies in a GPO's user configuration?
I only see them in computer configuration -
or should I create a GPO for just the password policies?
-
some background...we have ricoh scanners and these scanners do not accept a special character in the password field. our company policy requires a special character in the password so we need to exclude the accounts used for the ricoh scanners
-
i applied at the domain level now
-
Filter using by OU using WMI. In your case, you would deny the specific WMI filter for that OU.
-
This might be a little easier....
www.grouppolicy.biz/2010/02/how-to-find-and-use-wmi-values-for-group-policy-filtering/
-
@IRJ said in Block GPO Inheritance:
Filter using by OU using WMI. In your case, you would deny the specific WMI filter for that OU.
This is the way I would do it if there isnt a SG you can filter by
-
@alex.olynyk said in Block GPO Inheritance:
is there a way to set password policies in a GPO's user configuration?
I only see them in computer configurationThey are located in computer configuration, why do you want to set them as user config?
-
@alex.olynyk said in Block GPO Inheritance:
or should I create a GPO for just the password policies?
Discrete policies are best
-
@IRJ said in Block GPO Inheritance:
This might be a little easier....
www.grouppolicy.biz/2010/02/how-to-find-and-use-wmi-values-for-group-policy-filtering/
great reference site for a whole host of questions!
-
@Brains Agree. I much rather manage SG memberships for GPO, than OU placement. Less clutter, less margin of error, easier access and oversight. I also understand that people often inherit their AD schema from predecessors and can't afford the time and risk for a complete redesign.
-
@chrisnbrooks What is SG?
-
security group
