[gptalk] Assistance

Sirs/Ma'ams,

I'm new to the GPO arena and I've been tasked with the following question.  I 
have attached the question and an earlier suggested "fix". I was told the 
prescribed "fix" was incorrect. I'd be most appreciative for any advice or 
suggestions available.  

The question:

In a lower OU from the root.  The intent is to apply a policy that puts a 
security group in �Remote Desktop Users� on all of the computers in that 
OU.  The only hurdle is there is a policy defined at the root level that puts 
J6 Administrators in that group across the domain.
 
The problem is to apply the policy just to the lower level OU without changing 
the top level policy.

The answer I was told was incorrect:

Block inheritance at that OU and apply your new GPO at that OU. 
This will block all GPO's from above unless they are "enforced" and only 
apply your new GPO.

OR

Create the new GPO at the OU and set the restricted group policy the way you 
want it.  Since it is at the OU it should override the policy setting from the 
domain.

The OU was enforced. 

Cheers for anything you can provide.

Respectfully,

SGT Chris Cozzalio
***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: