Group Policy Block Inheritance
Just as GPOs can be inherited, Active Directory also provides the option to block inheritance, as shown in Figure 19.7, of all GPOs from parent containers. Figure 19.7 should be compared to Figure 19.6 to show which policies are no longer blocked, but the parent policy that is enforced is still allowed. So, administrators who are granted the rights to manage group policy links on particular organizational units may decide to block inheritance, but if policies are enforced at a parent organizational unit or the domain, they will still be applied.
Figure 19.7. Group Policy Block Inheritance.
Block Inheritance is actually ...
Get Windows Server® 2012 Unleashed now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
