locked
Block Inheritance in Domain level RRS feed

  • Question

  • Hi,

    If you right click the domain in GPMC console, we can see "Block Inheritance" what is the benefit of enabling block inheritance in domain level.

    what type of situation block inheritance really helps for us.

    Sunday, May 3, 2020 10:09 AM

Answers

  • That's intended to block inheritance from site level GPOs

    More at https://www.windows-active-directory.com/windows-gpo-inheritance.html

    hth
    Marcin


    Sunday, May 3, 2020 11:25 AM
  • Hi,

    what is the benefit of enabling block inheritance in domain level.

    If you configure the policy at the domain level as Enforced, it instead overrides the policy linked at the OU level. The Block Inheritance function enables you to block policies applied at earlier levels. For example, you can use Block Inheritance at the OU level to block policies applied at the domain and site level.

    Block/unblock GPO inheritance.
    Administrators can use this option to block/unblock the inheritance of GPO settings by any OU or domain from its parent container.

    Procedure:

    Select the OU or domain for which inheritance of GPO settings is to be blocked or unblocked, and then block or unblock inheritance, as required.

    Steps:

    To block/unblock the inheritance of GPO settings for the required domain/OU:

    Click 'Management tab'.
    In 'GPO Management', click 'Manage GPO Links'.
    Select the required domain/OU/site using 'Select'.
    Click on 'Block Inheritance' or 'Unblock Inheritance' from 'Manage' option to block or unblock inheritance of GPO.

    reference:https://www.manageengine.com/products/ad-manager/help/gpo-management/block-unblock-inheritance.html

    Hope this information can help you
    Best wishes
    vicky


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by mcsebala Tuesday, May 5, 2020 4:24 PM
    Monday, May 4, 2020 2:03 AM
  • Block Inheritance at Domain Level helps to block the GPO which is applied at the site level. :) 

    Regards,

    Rajasekar

    • Marked as answer by mcsebala Saturday, May 9, 2020 10:55 AM
    Saturday, May 9, 2020 10:53 AM

All replies

  • That's intended to block inheritance from site level GPOs

    More at https://www.windows-active-directory.com/windows-gpo-inheritance.html

    hth
    Marcin


    Sunday, May 3, 2020 11:25 AM
  • Hi,

    what is the benefit of enabling block inheritance in domain level.

    If you configure the policy at the domain level as Enforced, it instead overrides the policy linked at the OU level. The Block Inheritance function enables you to block policies applied at earlier levels. For example, you can use Block Inheritance at the OU level to block policies applied at the domain and site level.

    Block/unblock GPO inheritance.
    Administrators can use this option to block/unblock the inheritance of GPO settings by any OU or domain from its parent container.

    Procedure:

    Select the OU or domain for which inheritance of GPO settings is to be blocked or unblocked, and then block or unblock inheritance, as required.

    Steps:

    To block/unblock the inheritance of GPO settings for the required domain/OU:

    Click 'Management tab'.
    In 'GPO Management', click 'Manage GPO Links'.
    Select the required domain/OU/site using 'Select'.
    Click on 'Block Inheritance' or 'Unblock Inheritance' from 'Manage' option to block or unblock inheritance of GPO.

    reference:https://www.manageengine.com/products/ad-manager/help/gpo-management/block-unblock-inheritance.html

    Hope this information can help you
    Best wishes
    vicky


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by mcsebala Tuesday, May 5, 2020 4:24 PM
    Monday, May 4, 2020 2:03 AM
  • Block Inheritance at Domain Level helps to block the GPO which is applied at the site level. :) 

    Regards,

    Rajasekar

    • Marked as answer by mcsebala Saturday, May 9, 2020 10:55 AM
    Saturday, May 9, 2020 10:53 AM
  • This is the benefit of block inheritance.

    The Block Inheritance function enables you to block policies applied at earlier levels. For example, you can use Block Inheritance at the OU level to block policies applied at the domain and site level. Block Inheritance does not stop the application of policies configured as Enforced.

    Regards.

    Saturday, May 9, 2020 11:13 AM