If I want to keep part of a parent OU's GPO but add child OU's GPO with different settings, will devices in the child OU get all settings.

Spencer Ian 20 Reputation points
2024-03-12T13:40:00.6633333+00:00

So Parent OU's GPO has a lot of settings configured including some we don't want in child OU. If I create new GPO link to child OU with different settings, will the resultant settings be combined on devices in the child OU (does it have any relevance if the corresponding problem settings in the child OU are set to disabled or not-configured)

Thanks Ian

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
11,198 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,637 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,245 questions
0 comments No comments
{count} votes

Accepted answer
  1. Daisy Zhou 21,436 Reputation points Microsoft Vendor
    2024-03-13T08:03:31.69+00:00

    Hello Spencer Ian,

    Thank you for posting in Q&A forum.

    If I create new GPO link to child OU with different settings, will the resultant settings be combined on devices in the child OU.

    A: If you create new GPO link to child OU with different settings, if these setting are different settings as in the parent OU's GPO, the resultant settings will be combined on devices in the child OU.

    If the settings are the same settings as in the parent OU's GPO and for this same setting, you configured "Enabled" in the parent OU's GPO and you configured "Disabled" in the child OU's GPO, the devices in the child OU will apply "Disabled" setting within new GPO linked to child OU and the devices in the parent OU will apply "Enabled" setting within the parent OU's GPO.

    does it have any relevance if the corresponding problem settings in the child OU are set to disabled or not-configured?
    A: If you did not configure the setting within new GPO linked to the child OU, there will be no relevance.

    I hope the information above is helpful. If there is anything I misunderstood, please correct me.

    If you have any questions or concerns, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. Thameur-BOURBITA 32,641 Reputation points
    2024-03-12T15:03:33.79+00:00

    Hi @Spencer Ian

    If you have some GPO settings configured in GPO linked to parent OU and not configured in GPO linked to child OU , in this case the setting of parent GPO will be applied.

    In this case, the simplest thing is to change the link of the GPO already linked to the parent OU, by linking it at the child OU (execpt child OU you mentioned it in your question) level to be sure that it will not applied to the target child OU.

    Please don't forget to accept helpful answer

    1 person found this answer helpful.