This document describes ManageSoft's handling of schedules using policy precedence.
Schedules in policy
ManageSoft supports only one user schedule per user and one computer schedule per managed device. If two policies both have user schedules or both have computer schedules, then the schedule from the policy with highest precedence is used.
Policy inheritance is governed using the following rule:
- A user/computer "inherits" all policies that apply to its Organizational Unit (OU) or any parent OUs, including the domain itself (except where the policy inheritance is blocked).
This is the basis of policy merging, which involves taking all policies that apply to the user/computer (through inheritance) and generating a single merged policy.
How do I block policy inheritance?
- Select the OU
- Right-click and select Properties The OU Properties page is displayed.
- Check the Block Policy inheritance box.
- Click OK.
Group policies in Active Directory have an order of precedence. This order depends on where they are inherited. If two group policies contain conflicting settings, the policy with the higher precedence takes effect. The closer a policy is to a user/computer, the higher its precedence. This precedence is NOT ManageSoft-related.
A policy list is made up of group policies linked to either OUs (highest) or domains (lowest).
Example
In the following example, OU2 is closer to the actual computer than OU1, so a policy linked to OU2 would take precedence over a policy linked to OU1 or the domain.
Domain (policy has lowest precedence)
OU1
OU2 (policy has highest precedence)
Computer
How does this effect schedule inheritance?
Continuing with the above example, let's say policies have been linked to OU2 and the domain - both of which have schedules attached. A computer can have only one schedule, so when generating a merged computer policy for the computer in OU2, the schedule attached to the policy with the highest precedence (in this case, OU2) is used.
Comments