GPO Object Question

[Guest]

I have a GPO setup with restricted groups at the OU level.
The questions I have are:

If I change the refresh interval, and Security Policy Processing setting for
the computer administrative template for this GPO does it affect the the
settings for other GPO's at the same level, and lower levels, for that matter.

Are the modifications restricted only to that GPO?

Will changing GPO Computer Security settings affect any other GPO's.

If a GPO setting is set to 'not configured' does that setting have a default
value, or does it have no effect?

 

[ptwilliams]

If you have a GPO linked to an OU, the settings defined will only apply to
that OU and sub-containers.

These settings will not affect any other OUs unless you also link the GPO to
those OUs

If the policy setting is Not Configured, it makes no changes, thus settings
higher up prevail, i.e. the OU policy will not override the local, site or
domain settings unless they conflict.

There are some minor exceptions, such as password complexity policy, etc.
but I don't think these fall within the scope of your question.

Hope this helps


--

Paul Williams

http://www.msresource.net
http://forums.msresource.net
______________________________________
I have a GPO setup with restricted groups at the OU level.
The questions I have are:

If I change the refresh interval, and Security Policy Processing setting for
the computer administrative template for this GPO does it affect the the
settings for other GPO's at the same level, and lower levels, for that
matter.

Are the modifications restricted only to that GPO?

Will changing GPO Computer Security settings affect any other GPO's.

If a GPO setting is set to 'not configured' does that setting have a default
value, or does it have no effect?

 

[Guest]

If the default policy setting that has not been configured for the Computer
refresh interval would that mean that there would be no value or would there
be a default?
If there is what would that value be.

 

[ptwilliams]

What policy are you talking about?

Not configured means just that. It's not configured. Which means it's
probably configured in a higher policy.

--

Paul Williams

http://www.msresource.net
http://forums.msresource.net
______________________________________
If the default policy setting that has not been configured for the Computer
refresh interval would that mean that there would be no value or would there
be a default?
If there is what would that value be.

 

[Guest]

I am referring to the Default Domain Policy/Admin Templates/System/Group
Policy.

 

[ptwilliams]

In which case I would think the answer to your question is yes - both. In
some cases not configured would result in a system default (written into
Windows) and could also mean that that policy is actually not being
enforced.

Some serious digging is in order to ascertain which is the case for
individual settings...

--

Paul Williams

http://www.msresource.net
http://forums.msresource.net
______________________________________
I am referring to the Default Domain Policy/Admin Templates/System/Group
Policy.