Deleting a Group Policy Object Removes Links for Other Active Directory Containers (231288)

SUMMARY

When a Group Policy Object (GPO) is created, objects representing the GPO are created in the System container relative to the domain in Active Directory, and a directory structure for files associated with the GPO is created in SYSVOL. A reference (or "link") to the new GPO is created on the site, domain, or organizational unit (OU) in which the administrator creates the GPO.

Once created in Active Directory, the GPO can be linked to by other sites, domains, or OUs. This is accomplished by adding a Group Policy Object link. When a GPO is modified, the change is only recorded in one place. Because links are used to point to the GPO from sites, domains, or OUs, no other changes are necessary. All client users and computers are updated automatically.

An administrator should exercise caution in deleting a GPO from the directory, as it may be linked to by other sites, domains, or OUs in Active Directory. If an administrator chooses to remove a GPO permanently (not just delete the link), all links to the GPO are removed, which could affect other parts of the organization.