How to enable GP in a Domain Setting

[Nejmos Saqeb]

Greetings,

Assuming me as a Newbie, can anyone guide me in implementing Group Policy in
a Domain setting.

I've a W2k Domain Controller with about 30 users. I've made the OUs for them
and want to enable GPolicies on them.

Can anyone guide me from the beginning?

Thanks
Nejmos Saqeb

 

[Greg]

GPOs are implemented in the following order:
local,site,domain,and OU. This means that an OU GPO
setting will take presedence over a domain GPO setting.
Now there are 2 settings that can affect this, "No
Override" and "Block Inheritance". They both do just what
they say however, No Override take presedence over Block
Inheritance. So, for example if you have Block Inheritance
set at the OU level and No Override at the domain level
then the domain GPO will win out. Also, rember with GPO
settings that "Computer Settings" are applied at boot up
and "User Settings" are applied at logon. As for your
situation, if all OUs are getting the same policy then set
it at the domain level if not then the OU. A good practice
is to apply all common settings to all users and computers
at the domain level with No Override and then set specific
settings at the OU level.
Hope this helps.