A method and system for implementing policy by accumulating policies for a policy
recipient from policy objects associated with a hierarchically organized structure
of containers, such as directory containers (sites, domains and organizational
units) that includes the policy recipient. Based on administrator input, policy
settings for the policy recipient may be accumulated into a specific order by inheriting
policy from higher containers, which may enforce their policy settings over those
of lower containers. Policy that is not enforced may be blocked at a container.
The result is an accumulated set of group policy objects that are ordered by relative
strength to resolve any policy conflicts. Policy may be applied to a policy recipient
by calling extensions, such as an extension that layers the policy settings into
the registry or an extension that uses policy information from the objects according
to the ordering thereof.