Windows 2000 Administration in a Nutshell

Name

Group Policy Objects (GPOs)

Synopsis

Block Group Policy Objects (GPO) inheritance, configure a GPO (multiple tasks), create a GPO, delegate administrative control of a GPO, delete a GPO, disable a GPO, display links for a GPO, filter a GPO, force a GPO, link a GPO, and open a GPO.

Procedures

The procedures described later in this article involve manipulating GPOs in various ways. Different MMC consoles are used in different situations, specifically:

To work with GPOs in a site

Open the Active Directory Sites and Services console → right-click on a site → Properties → Group Policy tab

To work with GPOs in a domain or OU

Open the Active Directory Users and Computers console → right-click on a domain or OU → Properties → Group Policy tab

If the context described is not clear in the procedures listed later in this article, the console to be used is explicitly stated; otherwise, the appropriate console is assumed to be already open at the start of the procedure.

You typically work with GPOs by creating and linking them to a specific container (site, domain, or OU) in Active Directory, and most procedures in this article reflect this. However, you can also open a GPO directly (see Section later in this article) and configure certain aspects of its operation.

Block GPO Inheritance

Right-click on a container → Properties → Group Policy → select Block Policy Inheritance

Blocking GPO inheritance prevents settings from GPOs linked to parent containers from being inherited by the selected child ...