+ Post New Thread
Results 1 to 10 of 10
Windows 7 Thread, Undoing a GPO setting in Technical; Just a quick question - if the LEA set a GPO option at the top of an OU can I ...
  1. #1

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,279
    Thank Post
    972
    Thanked 325 Times in 193 Posts
    Blog Entries
    11
    Rep Power
    165

    Undoing a GPO setting

    Just a quick question - if the LEA set a GPO option at the top of an OU can I then undo that setting my putting in place my own GPO and setting it to 'disabled'?

    CHeers

    Gareth

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,323
    Thank Post
    903
    Thanked 1,801 Times in 1,550 Posts
    Blog Entries
    12
    Rep Power
    467
    If you set the group policy object to disabled it will not apply. As far as the computers or users are concerned it does not exist.

  3. Thanks to FN-GM from:

    garethedmondson (27th April 2010)

  4. #3

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,279
    Thank Post
    972
    Thanked 325 Times in 193 Posts
    Blog Entries
    11
    Rep Power
    165
    Yes I know that but I cannot disable domain wide GPO's as they apply to other schools as well. So I was wondering if my GPO would overwrite the LEA GPO.

    Gareth

  5. #4
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,995
    Thank Post
    123
    Thanked 286 Times in 263 Posts
    Rep Power
    108
    It should work but sometimes it depends on the setting. Some settings may have to be set to something else to get rid.

  6. Thanks to ChrisH from:

    garethedmondson (27th April 2010)

  7. #5

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,821
    Thank Post
    272
    Thanked 1,140 Times in 1,036 Posts
    Rep Power
    351
    You may find that the local machines ignore the policy which you put in as it is conflicting with a GPO higher up.

    If multiple GPOs attempt to set a setting to conflicting values, the GPO with the highest precedence sets the setting. GPO processing is based on a last writer wins model, and GPOs that are processed later have precedence over GPOs that are processed sooner. Group Policy objects are processed according to the following order:

    The local Group Policy object (LPGO) is applied.

    GPOs linked to sites.

    GPOs linked to domains

    GPOs linked to organizational units. In the case of nested organizational units, GPOs associated with parent organizational units are processed prior to GPOs associated with child organizational units.
    Source: Managing inheritance of Group Policy: Group Policy

  8. Thanks to glennda from:

    garethedmondson (27th April 2010)

  9. #6

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,323
    Thank Post
    903
    Thanked 1,801 Times in 1,550 Posts
    Blog Entries
    12
    Rep Power
    467
    It will merge the settings from yours and the LEA one.

    You could create a sub OU and disable inheritance. Again this will not apply any settings and machines and users will act asif it inst there.

  10. Thanks to FN-GM from:

    garethedmondson (27th April 2010)

  11. #7
    michaelf's Avatar
    Join Date
    Jun 2007
    Location
    Kettering, Northants
    Posts
    81
    Thank Post
    7
    Thanked 13 Times in 10 Posts
    Rep Power
    18
    Quote Originally Posted by glennda View Post
    If multiple GPOs attempt to set a setting to conflicting values, the GPO with the highest precedence sets the setting. GPO processing is based on a last writer wins model, and GPOs that are processed later have precedence over GPOs that are processed sooner. Group Policy objects are processed according to the following order:

    The local Group Policy object (LPGO) is applied.

    GPOs linked to sites.

    GPOs linked to domains

    GPOs linked to organizational units. In the case of nested organizational units, GPOs associated with parent organizational units are processed prior to GPOs associated with child organizational units.

    Source: Managing inheritance of Group Policy: Group Policy
    If I'm reading that correctly it would suggest that GPO's lower down the chain have priority, and that as such yes a GPO applied to a sub OU (your own GPO) would overwrite those higher above it (your LEA's). So in other words yes it would.

  12. Thanks to michaelf from:

    garethedmondson (27th April 2010)

  13. #8

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,821
    Thank Post
    272
    Thanked 1,140 Times in 1,036 Posts
    Rep Power
    351
    Quote Originally Posted by michaelf View Post
    If I'm reading that correctly it would suggest that GPO's lower down the chain have priority, and that as such yes a GPO applied to a sub OU (your own GPO) would overwrite those higher above it (your LEA's). So in other words yes it would.
    It doesn't say they have priority they are just process by the machine later.Although this is supposed to happen i know many instances when a gpo higher in the tree is applied and the lower one tries to apply and fails.
    For example on a single site the Default Domain Policy is applied first as it is at the top of the tree but if you say set an active desktop in this - then try to set a different one lower down on a seperate ou you may find the client either ignores it or does not apply that setting.

    It's not what microsoft say should happen but in my experience it does!

    Toby

  14. Thanks to glennda from:

    garethedmondson (27th April 2010)

  15. #9

    Hightower's Avatar
    Join Date
    Jun 2008
    Location
    Cloud 9
    Posts
    4,920
    Thank Post
    494
    Thanked 690 Times in 444 Posts
    Rep Power
    242
    Just did my 70-270 training the other week and the way to remember this is with drugs - LSD

    L - Local
    S - Site
    D - Domain
    OU - Organisational Units

    Basically the local policy is applied which is then overwritten by any site policies which is then overwritten by any domain policies.

  16. Thanks to Hightower from:

    garethedmondson (27th April 2010)

  17. #10

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,279
    Thank Post
    972
    Thanked 325 Times in 193 Posts
    Blog Entries
    11
    Rep Power
    165
    Thanks everyone. Further advice given away from Edugeek is to choose the 'Enforce' option for the GPO. This will force any setting change for the GPO regardless of what was set higher.

    Cheers

    GJE



SHARE:
+ Post New Thread

Similar Threads

  1. setting homepage with GPO
    By RabbieBurns in forum Windows
    Replies: 11
    Last Post: 3rd May 2011, 01:09 PM
  2. Replies: 9
    Last Post: 28th November 2008, 03:04 PM
  3. Undoing appdata redirection
    By Andi in forum Windows
    Replies: 10
    Last Post: 12th November 2008, 09:44 AM
  4. Proxy setting GPO
    By LOUD in forum Wireless Networks
    Replies: 1
    Last Post: 11th December 2007, 09:35 AM
  5. IE setting in GPO not working on vista
    By wickit in forum Windows
    Replies: 12
    Last Post: 8th November 2007, 05:02 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •