in anew GPO or even the defalt GPO, under the Scope tap,there is: - location, - enforced, -link enabled, - path by default, enforced is no and link enable is yes. can somebody tell me the meaning of it? thanks.

When a Group Policy Object (GPO) is link enabled it means the settings in the Group Policy Objectwill beapplied to the object (can be a Local System, Domain, Site and Organizational Unit) to which it has a link. By default settings in Group Policy Objects (GPOs) get applied in the following order: Local system policies first, then policies on the Active Directory Domain level, then policies on the Active Directory Site level and then the policies for all the Organization Units the computer and user are members of, starting at the root of the domain. The settings that are last applied are the settings in effect. When a Group Policy Object (GPO) is enforced it means the settings in the Group Policy Object on an Organization Unit (which is shown as a folder within the Active Directory Users and Computers MMC) cannot be overruled by a Group Policy Object (GPO) which is link enabled on an Organizational Unitbelow the Organizational Unit with the enforced Group Policy Object (GPO).In Active Directory Users and Computers MMC 'below' means it is a subfolder. There's more information on Group Policy Objects (GPOs) on Microsoft TechNet.

I have an additional question about this... I was trying to use the "enforced" button to make a policy become active but it wasn't seeming to work (which is why the search engine found this forum entry)...How do you force a GPO to be used when someone logs on immediately? Is there a way to force the GPO into effect? I have linked the GPO I created to the root of my domain and still it is not being followed by users logging on a few hours later.Thanks,ShayneShayne Neal

What setting are you referring to exactly? You need to check the event viewer for any GP related errors and run a gpresult to see if the GPO in question is actually being applied.Paul Adare CTO IdentIT Inc. ILM MVP

Shayne, Try opening a command line on the computer and run "gpupdate /force"(without the quotes). This will force the computer to grab the current computer and user group policy and apply it. Group policy takes a certain amount of time to refresh after changes have been made. I know you can change this interval but if you want to check changes in group policy immediately, run gpupdate. Hope this helps, Mirabent