Deleting a Group Policy Object Removes Links for Other Active Directory Containers

• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Datacenter Server
• Microsoft Windows 2000 Server

SUMMARY

When a Group Policy Object (GPO) is created, objects representing the GPO are created in the System container relative to the domain in Active Directory, and a directory structure for files associated with the GPO is created in SYSVOL. A reference (or "link") to the new GPO is created on the site, domain, or organizational unit (OU) in which the administrator creates the GPO.

Once created in Active Directory, the GPO can be linked to by other sites, domains, or OUs. This is accomplished by adding a Group Policy Object link. When a GPO is modified, the change is only recorded in one place. Because links are used to point to the GPO from sites, domains, or OUs, no other changes are necessary. All client users and computers are updated automatically.

An administrator should exercise caution in deleting a GPO from the directory, as it may be linked to by other sites, domains, or OUs in Active Directory. If an administrator chooses to remove a GPO permanently (not just delete the link), all links to the GPO are removed, which could affect other parts of the organization.

MORE INFORMATION

You can use the following steps to determine if a GPO is used by other sites, domains, or OUs before deleting the GPO:

1. Right-click the site, domain, or OU in which the GPO to be deleted is linked, and then click Properties.



2. Click the Group Policy tab.



3. Click the GPO to be deleted, and then click Properties.



4. Click the Links tab, click the domain to search for links to this GPO in the Domain box, and then click Find Now. The sites, domains, or OUs that are linked to the selected GPO are displayed.



5. Repeat as necessary for each domain that may have links to the GPO.

Additional query words:

Keywords : kbenv
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbinfo