Windows Policy Issue

[detroit]

Here's my problem....

I have a setting in a default domain policy to disable windows firewall.

I want to re-enable this for some users, so I created an OU under the domain, and setup and enforced a policy to Enable windows firewall.

It is not working.

Is this due to Windows Default Domain Policy being higher? Does it override policies that are lower than it?

Thanks

Detroit

 

[SteveRoadWarrior]

My understanding is that lower policies that are enforced will override higher policies. But the best way to find out is to run the Group Policy results wizard in the Group Policy Management tool.

Here's a short overview of Group Policy:

http://www.windowsitpro.com/Articles/ArticleID/15420/15420.html?Ad=1

If you're running Server 2003 or Windows XP Service Pack 2 or later, you should use the Group Policy Administration tool:

http://www.google.com/search?hl=en&q=group+policy+management+console+sp1&btnG=Search

It's got a reporting feature that will show you all the policies that apply to a User when they work at a Computer. It will show you which settings applied from which policies and why. It will even show you which policies override which other policies and why. It's really great for this sort of thing.