Enforced Group Policy

LunchbocksLunchbocks Member Posts: 319 ■■■■□□□□□□
in MCTS / MCITP on Windows 2008 General
I understand that enforced policies will always override other policies as well as Block Inheritance. However, if I go to a policy and under Delegation select advanced and remove the "Apply Group Policy" checkbox, and then select "Deny" for that entry, does the policy still get enforced?
Degree: Liberty University - B.S Computer Science (In Progress)
Current Certs: CCENT | MCTS | Network+
Currently Working On: Security+
2020 Goals: CCNA, CCNP Security, Linux+


· Share on FacebookShare on Twitter

Comments

  • texasittexasit Member Posts: 147
    From my understanding no the policy will not apply to whichever user or group you deny apply group policy and I believe "read" is the other permission you must deny.
    · Share on FacebookShare on Twitter
  • Hyper-MeHyper-Me Banned Posts: 2,059
    It would not be enforced in that scenario. You would be effectively denying those objects the ability to even read the GPO in question.
    · Share on FacebookShare on Twitter
  • LunchbocksLunchbocks Member Posts: 319 ■■■■□□□□□□
    Thanks guys, that's what I thought; I just wanted to make sure.
    Degree: Liberty University - B.S Computer Science (In Progress)
    Current Certs: CCENT | MCTS | Network+
    Currently Working On: Security+
    2020 Goals: CCNA, CCNP Security, Linux+


    · Share on FacebookShare on Twitter
Sign In or Register to comment.