Disabling an Unused Part of Group Policy Objects

[Nick]

Disabling an Unused Part of Group Policy Objects

One way to disable a policy is to disable an unused part of the GPO. By disabling part of a policy that isn’t used, the application of GPOs and security will be faster.


Another way to disable a policy is to disable an unused part of the GPO. When you do this, you block the Computer Configuration or User Configuration settings, or both, and don’t allow them to be applied. By disabling part of a policy that isn’t used, the application of GPOs and security will be faster.

You can enable and disable policies partially or entirely by following these steps:

1. In the GPMC, select the container for the site, domain, or OU with which you want to work.

2. Select the policy object you want to work with, and then click the Details tab in the right pane.

3. Choose one of the following status settings from the GPO Status list and click OK when prompted to confirm that you want to change the status of this GPO:

-All Settings Disabled Disallows processing of the policy object and all its settings.
-Computer Configuration Settings Disabled Disables processing of Computer Configuration settings. This means that only User Configuration settings are processed.
-Enabled Allows processing of the policy object and all its settings.
-User Configuration Settings Disabled Disables processing of User Configuration settings. This means that only Computer Configuration settings are processed.

From the Microsoft Press book Microsoft Windows Server 2008 Administrator’s Pocket Consultant by William R. Stanek.


credit: technet.microsoft.com