Block user policies

[csvensson]

I have an OU with only workstations in it (no users) and in the GPO I have applied to the OU I don't have any user configuration settings, only computer configuration settings. My previous Default Domain Policy had very little settings coming down to my OU, just some account and security settings etc. Now the new AD guy has added tons of user configuration settings to the default domain policy and it messes up the functionality of my workstations when a domain user logs in and receives all these user settings, disable ActiveX etc. Is there a way to block these default domain user specific policies to be applied to my OU? Is it possible to block the Default Domain policy on my OU or do I need to configure everything on my OU GPO to override his settings from his policy as mine would over rider his?

[guidopucciarello]

Hey cvsensson,
by using GPMC you can block inheritance and gpo links to any OU that you want to unlink... and relink to the ones you want to use...


regards,

Guido