Security in AD

[Scott]

We are currently working toward creating an Active
Directory Domain structure. We are looking at a forest
with several OUs and possibly a couple child domains.
When pushing out policies as a Domain Admin will that
affect all OUs in the Domain or can some OUs be left out?

Thanks in advance for any help.

 

[Matjaz Ladava [MVP]]

You can controll the aplication of policy in hiearchy by setting Block
policy inheritance on a specific OU. This is valid as long as policy does
not have No Override setting.

--
Regards

Matjaz Ladava, MCSE, MCSA, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com