Tip: Disabling an Unused Part of Group Policy Objects

Another way to disable a policy is to disable an unused part of the GPO. When you do this, you block the Computer Configuration or User Configuration settings, or both, and don’t allow them to be applied. By disabling part of a policy that isn’t used, the application of GPOs and security will be faster.

Tips RSS Feed

Subscribe to the TechNet Magazine Tips RSS feed.

You can enable and disable policies partially or entirely by following these steps:
1. In the GPMC, select the container for the site, domain, or OU with which you want to work.
2. Select the policy object you want to work with, and then click the Details tab in the right pane.
3. Choose one of the following status settings from the GPO Status list and click OK when prompted to confirm that you want to change the status of this GPO:
All Settings Disabled Disallows processing of the policy object and all its settings.
Computer Configuration Settings Disabled Disables processing of Computer Configuration settings. This means that only User Configuration settings are processed.
Enabled Allows processing of the policy object and all its settings.
User Configuration Settings Disabled Disables processing of User Configuration settings. This means that only Computer Configuration settings are processed.

From the Microsoft Press book Microsoft Windows Server 2008 Administrator’s Pocket Consultant by William R. Stanek.

Looking for More Tips?

For more Windows Server tips, visit the TechNet Magazine Windows Server 2008 Tips page.

For more Tips on other products, visit the TechNet Magazine Tips index.