inheritance question

[djc]

I am preparing for a test and am a bitt foggy on this particular part of GPO
inheritance:
1) do parent domains gpo's get inherited by child domains? (yes/no) I know
password policy is treated differently and each domain requires it's own. My
memory is telling me the answer is no, that parent/child domain setup is a
DNS namespace only but then I saw an example question where Site GPO's do
propogate to all the domains within that site? so I began to question my
memory.

any info on site to domain to child domain GPO inheritance would be greatly
appreciated. I am comfortable with domain to OU and child OU inheritance
though, so no need to include that. Thanks.

 

[Dmitry Korolyov [MVP]]

1) No, child domains do not inherit any policies from parent domains
2) GPOs assigned at the site level will affect all user in computer accounts
currently located in the appropriate site (according to defined subnets,
subnet-to-site mappings and computer's IP address), regardless of the
computer/user's own domain.

 

[djc]

Thank you Dmitry.

1) No, child domains do not inherit any policies from parent domains
2) GPOs assigned at the site level will affect all user in computer accounts
currently located in the appropriate site (according to defined subnets,
subnet-to-site mappings and computer's IP address), regardless of the
computer/user's own domain.

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Directory Services

I am preparing for a test and am a bitt foggy on this particular part of
GPO
inheritance:
1) do parent domains gpo's get inherited by child domains? (yes/no) I know
password policy is treated differently and each domain requires it's own.
My
memory is telling me the answer is no, that parent/child domain setup is a
DNS namespace only but then I saw an example question where Site GPO's do
propogate to all the domains within that site? so I began to question my
memory.

any info on site to domain to child domain GPO inheritance would be
greatly
appreciated. I am comfortable with domain to OU and child OU inheritance
though, so no need to include that. Thanks.

 

[Dmitry Korolyov [MVP]]

the previous message should read "all user AND computer accounts" instead of
"user in computer accounts", a typo, sorry.

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Directory Services

1) No, child domains do not inherit any policies from parent domains
2) GPOs assigned at the site level will affect all user in computer
accounts currently located in the appropriate site (according to defined
subnets, subnet-to-site mappings and computer's IP address), regardless of
the computer/user's own domain.

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Directory Services

I am preparing for a test and am a bitt foggy on this particular part of
GPO
inheritance:
1) do parent domains gpo's get inherited by child domains? (yes/no) I
know
password policy is treated differently and each domain requires it's own.
My
memory is telling me the answer is no, that parent/child domain setup is
a
DNS namespace only but then I saw an example question where Site GPO's do
propogate to all the domains within that site? so I began to question my
memory.

any info on site to domain to child domain GPO inheritance would be
greatly
appreciated. I am comfortable with domain to OU and child OU inheritance
though, so no need to include that. Thanks.

 

[Cary Shultz [A.D. MVP]]

To clarify one point:

GPOs are a domain thing. They are stored in the Domain NC and as such are
replicated only to Domain Controllers in that domain. So, inheritance plays
absolutely no role whatsoever when talking about Parent / Child Domains.

--
Cary W. Shultz
Roanoke, VA 24014
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com