+ Post New Thread
Results 1 to 4 of 4
Windows Server 2000/2003 Thread, Why would inherited permissions be blocked at default domain level? in Technical; As seems pretty standard with most other Primary Schools we have server performing most tasks (apart from SIMS) as a ...
  1. #1
    speckytecky's Avatar
    Join Date
    May 2006
    Location
    UK
    Posts
    2,497
    Thank Post
    3,372
    Thanked 256 Times in 209 Posts
    Blog Entries
    3
    Rep Power
    109

    Why would inherited permissions be blocked at default domain level?

    As seems pretty standard with most other Primary Schools we have server performing most tasks (apart from SIMS) as a curriculum server. Looking at the GPO recently I was puzzled to see a blue exclamation mark against the default domain policy and see it's because the block inherited permissions has been ticked.

    I think this has happened by accident but in case not wondered what circumstances would make it appropriate to have it ticked?

  2. #2
    speckytecky's Avatar
    Join Date
    May 2006
    Location
    UK
    Posts
    2,497
    Thank Post
    3,372
    Thanked 256 Times in 209 Posts
    Blog Entries
    3
    Rep Power
    109
    Bump, bump!

  3. #3

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,083
    Thank Post
    853
    Thanked 2,678 Times in 2,272 Posts
    Blog Entries
    9
    Rep Power
    769
    If I am thinking of the right setting then it blocks inheritance of any policy objects above it in the domain tree. As it is the top level object I don't think that it would actually have any affect. Not 100% on this but one reason to tick it would be if your domain was part of a larger domain forrest and you wanted to apply your own individual policies without the interfearence from forest wide policies.

  4. Thanks to SYNACK from:

    speckytecky (9th July 2010)

  5. #4
    speckytecky's Avatar
    Join Date
    May 2006
    Location
    UK
    Posts
    2,497
    Thank Post
    3,372
    Thanked 256 Times in 209 Posts
    Blog Entries
    3
    Rep Power
    109
    That makes sense Synack. Thanks very much.

SHARE:
+ Post New Thread

Similar Threads

  1. Raising domain functional level
    By rhyds in forum Windows
    Replies: 4
    Last Post: 30th July 2008, 05:25 PM
  2. Changing Domain Fuctional Level for 2008
    By mitchell1981 in forum Windows Server 2008
    Replies: 1
    Last Post: 14th May 2008, 09:58 PM
  3. Exchange 2003 Default Permissions
    By AnnDroyd in forum Windows
    Replies: 0
    Last Post: 26th March 2008, 11:06 AM
  4. Domain Funtionality Level
    By PRicho in forum Windows
    Replies: 1
    Last Post: 8th February 2008, 09:29 AM
  5. Replies: 2
    Last Post: 5th December 2007, 12:21 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •