If I want to keep part of a parent OU's GPO but add child OU's GPO with different settings, will devices in the child OU get all settings.

Question

So Parent OU's GPO has a lot of settings configured including some we don't want in child OU. If I create new GPO link to child OU with different settings, will the resultant settings be combined on devices in the child OU (does it have any relevance if the corresponding problem settings in the child OU are set to disabled or not-configured)

Thanks Ian

Answer 1

Hello Spencer Ian,

Thank you for posting in Q&A forum.

If I create new GPO link to child OU with different settings, will the resultant settings be combined on devices in the child OU.

A: If you create new GPO link to child OU with different settings, if these setting are different settings as in the parent OU's GPO, the resultant settings will be combined on devices in the child OU.

If the settings are the same settings as in the parent OU's GPO and for this same setting, you configured "Enabled" in the parent OU's GPO and you configured "Disabled" in the child OU's GPO, the devices in the child OU will apply "Disabled" setting within new GPO linked to child OU and the devices in the parent OU will apply "Enabled" setting within the parent OU's GPO.

does it have any relevance if the corresponding problem settings in the child OU are set to disabled or not-configured?
A: If you did not configure the setting within new GPO linked to the child OU, there will be no relevance.

I hope the information above is helpful. If there is anything I misunderstood, please correct me.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Hi @Spencer Ian

If you have some GPO settings configured in GPO linked to parent OU and not configured in GPO linked to child OU , in this case the setting of parent GPO will be applied.

In this case, the simplest thing is to change the link of the GPO already linked to the parent OU, by linking it at the child OU (execpt child OU you mentioned it in your question) level to be sure that it will not applied to the target child OU.

Please don't forget to accept helpful answer