Microsoft® Windows® Security Resource Kit, Second Edition

Altering Group Policy Application

When you create Group Policy structure in your organization, you might need to alter the default processing of GPOs. Group Policy provides four options for doing this:

• Block Inheritance

• No Override

• Group Policy object filtering

• Loopback mode processing

Note

You can also filter Group Policy on Windows Server 2003 and Windows XP by using Windows Management Instrumentation (WMI) filters if the computers have accounts in a Windows Server 2003–based Active Directory.

Block Inheritance

You might have a situation in which a subcontainer such as an OU should not receive GPOs from parent objects. For example, suppose you ...