+ Post New Thread
Results 1 to 4 of 4
Windows Server 2000/2003 Thread, Why would inherited permissions be blocked at default domain level? in Technical; As seems pretty standard with most other Primary Schools we have server performing most tasks (apart from SIMS) as a ...
  1. #1
    speckytecky's Avatar
    Join Date
    May 2006
    Location
    UK
    Posts
    2,539
    Thank Post
    3,426
    Thanked 261 Times in 213 Posts
    Blog Entries
    3
    Rep Power
    110

    Why would inherited permissions be blocked at default domain level?

    As seems pretty standard with most other Primary Schools we have server performing most tasks (apart from SIMS) as a curriculum server. Looking at the GPO recently I was puzzled to see a blue exclamation mark against the default domain policy and see it's because the block inherited permissions has been ticked.

    I think this has happened by accident but in case not wondered what circumstances would make it appropriate to have it ticked?

  2. #2
    speckytecky's Avatar
    Join Date
    May 2006
    Location
    UK
    Posts
    2,539
    Thank Post
    3,426
    Thanked 261 Times in 213 Posts
    Blog Entries
    3
    Rep Power
    110
    Bump, bump!

  3. #3

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,204
    Thank Post
    876
    Thanked 2,729 Times in 2,308 Posts
    Blog Entries
    11
    Rep Power
    782
    If I am thinking of the right setting then it blocks inheritance of any policy objects above it in the domain tree. As it is the top level object I don't think that it would actually have any affect. Not 100% on this but one reason to tick it would be if your domain was part of a larger domain forrest and you wanted to apply your own individual policies without the interfearence from forest wide policies.

  4. Thanks to SYNACK from:

    speckytecky (9th July 2010)

  5. #4
    speckytecky's Avatar
    Join Date
    May 2006
    Location
    UK
    Posts
    2,539
    Thank Post
    3,426
    Thanked 261 Times in 213 Posts
    Blog Entries
    3
    Rep Power
    110
    That makes sense Synack. Thanks very much.

SHARE:
+ Post New Thread

Similar Threads

  1. Raising domain functional level
    By rhyds in forum Windows
    Replies: 4
    Last Post: 30th July 2008, 05:25 PM
  2. Changing Domain Fuctional Level for 2008
    By mitchell1981 in forum Windows Server 2008
    Replies: 1
    Last Post: 14th May 2008, 09:58 PM
  3. Exchange 2003 Default Permissions
    By AnnDroyd in forum Windows
    Replies: 0
    Last Post: 26th March 2008, 11:06 AM
  4. Domain Funtionality Level
    By PRicho in forum Windows
    Replies: 1
    Last Post: 8th February 2008, 09:29 AM
  5. Replies: 2
    Last Post: 5th December 2007, 12:21 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •