Skip to content

Block Group Policy Inheritance in Windows Server 2008

By Codrut Nistor

Posted in How-to, Windows-server-2008-operating-systems

Whenever any group policy is created and linked to any domain site or organizational unit the settings are automatically inherited to the child objects and hence administrators can save a few extra clicks which they would otherwise have to do if inheritance was not available with the operating system. However in many cases administrators may not want a group policy to be inherited from its parent object because of any reason. When this is the case administrators can simply block inheritance and this will isolate the child object from any inherited settings coming down from the parent objects. As an administrator if you want to block inheritance on any object for example organizational unit in this case you are required to follow the steps given as below:

1.       Logon to Windows server 2008 computer with any account that has domain admin privileges.

2.       In search box at the bottom of start menu type Group Policy Management and press enter key to open Group Policy Management Console.

3.       From the opened window expand Forest > Domains and expand the domain name.

4.       Right click on the organizational unit on which you want to block inheritance and from the available menu click on Block Inheritance.