Hello @newhdanalyst ,
Thank you for posting in our Q&A forum.
Does enforced policy linked to domain say abc.local will apply both to default containers and OUes created afterwards? A: Yes, I think so if you did not configure " Block Inheritance" in any container within the domain.
However, we do not recommend you edit the gpo settings within the "default domain policy" group policy object. If you want to apply GPO setting in the domain wide, you can create a new GPO and rename it, and link it to your domain.
Hope the information above is helpful. If you have any question or concern, please feel free to let us know.
Best Regards, Daisy Zhou
=============================================== If the Answer is helpful, please click "Accept Answer" and upvote it.