Group Policy Objects (GPOs)


Block Group Policy Objects (GPO) inheritance, configure a GPO (multiple tasks), create a GPO, delegate administrative control of a GPO, delete a GPO, disable a GPO, display links for a GPO, filter a GPO, force a GPO, link a GPO, and open a GPO.


The procedures described later in this article involve manipulating GPOs in various ways. Different MMC consoles are used in different situations, specifically:

To work with GPOs in a site

Open the Active Directory Sites and Services console right-click on a site Properties Group Policy tab

To work with GPOs in a domain or OU

Open the Active Directory Users and Computers console right-click on a domain or OU Properties Group Policy tab

If the context described is not clear in the procedures listed later in this article, the console to be used is explicitly stated; otherwise, the appropriate console is assumed to be already open at the start of the procedure.

You typically work with GPOs by creating and linking them to a specific container (site, domain, or OU) in Active Directory, and most procedures in this article reflect this. However, you can also open a GPO directly (see Section later in this article) and configure certain aspects of its operation.

Block GPO Inheritance

Right-click on a container Properties Group Policy select Block Policy Inheritance

Blocking GPO inheritance prevents settings from GPOs linked to parent containers from being inherited by the selected child ...

Get Windows 2000 Administration in a Nutshell now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.