How do you remove a policy from a client with removing the GPO?

[Saavyd]

I have a windows 2000 Domain Controller that I use to apply Group Policy on several windows XP machines. My problem is that company policy for computers keeps changing, so I have to edit the GPO constantly. Sometimes I find it easier to create a new OU with the GPO settings that I want and mover the users and user into the new OU. But when I do this I find that the new settings are not taking affect, in fact they are keeping the settings from the last GPO they were in.

I ran the GPOTOOL.EXE and found the old policies as well as the new policies were still in affect on these computers. I only want the policy from the new OU to apply not the old ones. I don’t want to delete the old GPO because some users need to be in this OU still.

Anyone know how to remove unwanted polices from the client with out removing the GPO out of active directory?

 

[kmkeshav]

The problem you have now is with policies defined at various levels of the domain (domain level, site level and OU level). In your case, I assume you have policies defined at domain level and OU level. Here, users and computers in the OU will receive policies defined at both the levels. If you have a setting defined at the domain level policy and this conflicts with the OU level policy, the policy applied last will be effective. The order in which group policies apply:

1. The local Group Policy object (LPGO) is applied.
2. GPOs linked to sites.
3. GPOs linked to domains
4. GPOs linked to organizational units (OUs). In the case of nested OUs, GPOs associated with parent OUs are processed prior to GPOs associated with child OUs.

Also you have to consider "Block Policy Inheritance" and "No override" settings.

Please post back if you have more questions.

-Keshav

 

[ncotton]

It all depends how you have linked the policies. If you have removed the user AND the computer from the scope of any policy, unless you are using custom policy edits for policy preferences, no policy should be retained.

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant