Group Policy Objects (GPOs)
Block Group Policy Objects (GPO) inheritance, configure a GPO (multiple tasks), create a GPO, delegate administrative control of a GPO, delete a GPO, disable a GPO, display links for a GPO, filter a GPO, force a GPO, link a GPO, and open a GPO.
The procedures described later in this article involve manipulating GPOs in various ways. Different MMC consoles are used in different situations, specifically:
- To work with GPOs in a site
Open the Active Directory Sites and Services console → right-click on a site → Properties → Group Policy tab
- To work with GPOs in a domain or OU
Open the Active Directory Users and Computers console → right-click on a domain or OU → Properties → Group Policy tab
If the context described is not clear in the procedures listed later in this article, the console to be used is explicitly stated; otherwise, the appropriate console is assumed to be already open at the start of the procedure.
You typically work with GPOs by creating and linking them to a specific container (site, domain, or OU) in Active Directory, and most procedures in this article reflect this. However, you can also open a GPO directly (see Section later in this article) and configure certain aspects of its operation.
Block GPO Inheritance
Right-click on a container → Properties → Group Policy → select Block Policy Inheritance
Blocking GPO inheritance prevents settings from GPOs linked to parent containers from being inherited by the selected child ...