Enforced Group Policy

I understand that enforced policies will always override other policies as well as Block Inheritance. However, if I go to a policy and under Delegation select advanced and remove the "Apply Group Policy" checkbox, and then select "Deny" for that entry, does the policy still get enforced?

Find more posts tagged with

Comments

texasit

From my understanding no the policy will not apply to whichever user or group you deny apply group policy and I believe "read" is the other permission you must deny.

Hyper-Me

It would not be enforced in that scenario. You would be effectively denying those objects the ability to even read the GPO in question.

Lunchbocks

Thanks guys, that's what I thought; I just wanted to make sure.

Quick Links

All Categories
Recent Posts
Activity
Unanswered
Groups
Best Of