question about GPO in domain 2003

Hi

I have an OU with "Block Inheritance" is tagged.
I have a server 2003 R2 SP2 in this OU, I configured the local GPO of this
server(security optins),
when I'm running the RSOP on this server I get "NOT definded", I run the
GPUPDATE command, did'nt solv the problem.
why is that?

Lior

Meinolf
Mon May 05 07:20:01 PDT 2008

Hello ?????.?,

Last applied policy's are OU, Domain, Site, local, so even if you block the
policy on OU level it applies the policy one level higher, either another
OU or the Domain policy or Site. And as long as the computer is in the domain
it will not use the Local policy.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hi
>
> I have an OU with "Block Inheritance" is tagged.
> I have a server 2003 R2 SP2 in this OU, I configured the local GPO of
> this
> server(security optins),
> when I'm running the RSOP on this server I get "NOT definded", I run
> the
> GPUPDATE command, did'nt solv the problem.
> why is that?
> Lior
>

Marcin
Mon May 05 10:14:59 PDT 2008

Lior,
in order to verify whether the local GPO Security Options have been applied
(and how they differ from domain-based ones), you can use Security
Configuration and Analysis utility.
Note that while local GPO is processed in a domain environment, its settings
have always the lowest priority (you can verify this by checking content of
General tab of the Computer Configuration Properties dialog box in the RSoP
console)

hth
Marcin