inheritance question

  • Thread starter Thread starter djc
  • Start date Start date
D

djc

I am preparing for a test and am a bitt foggy on this particular part of GPO
inheritance:
1) do parent domains gpo's get inherited by child domains? (yes/no) I know
password policy is treated differently and each domain requires it's own. My
memory is telling me the answer is no, that parent/child domain setup is a
DNS namespace only but then I saw an example question where Site GPO's do
propogate to all the domains within that site? so I began to question my
memory.

any info on site to domain to child domain GPO inheritance would be greatly
appreciated. I am comfortable with domain to OU and child OU inheritance
though, so no need to include that. Thanks.
 
1) No, child domains do not inherit any policies from parent domains
2) GPOs assigned at the site level will affect all user in computer accounts
currently located in the appropriate site (according to defined subnets,
subnet-to-site mappings and computer's IP address), regardless of the
computer/user's own domain.
 
Thank you Dmitry.

Dmitry Korolyov said:
1) No, child domains do not inherit any policies from parent domains
2) GPOs assigned at the site level will affect all user in computer accounts
currently located in the appropriate site (according to defined subnets,
subnet-to-site mappings and computer's IP address), regardless of the
computer/user's own domain.

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Directory Services


djc said:
I am preparing for a test and am a bitt foggy on this particular part of
GPO
inheritance:
1) do parent domains gpo's get inherited by child domains? (yes/no) I know
password policy is treated differently and each domain requires it's own.
My
memory is telling me the answer is no, that parent/child domain setup is a
DNS namespace only but then I saw an example question where Site GPO's do
propogate to all the domains within that site? so I began to question my
memory.

any info on site to domain to child domain GPO inheritance would be
greatly
appreciated. I am comfortable with domain to OU and child OU inheritance
though, so no need to include that. Thanks.
 
the previous message should read "all user AND computer accounts" instead of
"user in computer accounts", a typo, sorry.

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Directory Services


Dmitry Korolyov said:
1) No, child domains do not inherit any policies from parent domains
2) GPOs assigned at the site level will affect all user in computer
accounts currently located in the appropriate site (according to defined
subnets, subnet-to-site mappings and computer's IP address), regardless of
the computer/user's own domain.

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Directory Services


djc said:
I am preparing for a test and am a bitt foggy on this particular part of
GPO
inheritance:
1) do parent domains gpo's get inherited by child domains? (yes/no) I
know
password policy is treated differently and each domain requires it's own.
My
memory is telling me the answer is no, that parent/child domain setup is
a
DNS namespace only but then I saw an example question where Site GPO's do
propogate to all the domains within that site? so I began to question my
memory.

any info on site to domain to child domain GPO inheritance would be
greatly
appreciated. I am comfortable with domain to OU and child OU inheritance
though, so no need to include that. Thanks.
 
Back
Top