Prevent a Group Policy object from being overridden

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To prevent a Group Policy object from being overridden

Do one of the following:
- For a Group Policy object that is linked to a domain or organizational unit, open Active Directory Users and Computers.
- For a Group Policy object that is linked to a site, open Active Directory Sites and Services.
In the console tree, right-click the site, domain, or organizational unit to which the Group Policy object is linked.
Click Properties, and then click the Group Policy tab.
In the Group Policy Object Links list, right-click the Group Policy object link that you want to enforce, click No Override, and then click OK. A check mark appears in the No Override column.

Notes

To complete this procedure, you must be logged on as a member of the Domain Administrators security group, the Enterprise Administrators security group, or the Group Policy Creator Owners security group.
To open Active Directory Users and Computers, click Start, click Control Panel, double-click Administrative Tools, and then double-click Active Directory Users and Computers.
To open Active Directory Sites and Services, click Start, click Control Panel, double-click Administrative Tools, and then double-click Active Directory Sites and Services.
If you set No Override on a Group Policy object link, the Group Policy settings are enforced on all users or computers in the site, domain, or organizational unit and on all users and computers in Active Directory containers that inherit Group Policy from it.
Group Policy settings that are enforced by using No Override cannot be blocked.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.