How To Block 1 GP from A parent OU in applying to a Child OU

[gops]

Have below policies in a Parent OU

Parent OU:Policy A,Policy B,Policy C

Have A Child OU and we dont want the policy "Policy C" to be applied to Child OU but "Policy A & B " should be applied.

Is the above possible?Inheritance will block everything above of Child OU right and delegation can be done in User/Group level right not on OU level?
Please help in achieving the above.
Thanks in Advance.

[trekker]

I highly recommend against blocking inheritance. Are these users or computers that you're applying the GPO to? You may be better modifying your OU structure to suite your needs.

[gops]

Yeah exactly.It is applied on authenticated Users .Decided to take out that child OU from under parent and move it outside and apply needed policy to the same.Better than blocking inheritance as you said.

[brad]

In this case, you could implement block inheritance on the child OU which would block all three GPOs you list, A, B and C. However, you could then assign A and B Enforce which would force past the block. The final result is that the child OU would receive GPOs A and B but no C since C wouldn't be assigned Enforced. Now I am choosing this solution in an isolated world, meaning that the only GPOs you care about are the ones listed. If you have Domain based GPOs, then using the block inheritance may not be desirable.

Brad Rudisail
Technical Support Specialist GPAnswers and PolicyPak