IT Questions and Answers :)

Thursday, May 16, 2019

From first to last, in what order are Group Policy objects applied?

From first to last, in what order are Group Policy objects applied?

  • Local computer, domain, AD site, OU, child OU
  • Child OU, OU, AD site, domain, local computer
  • Domain, AD site, OU, child OU, local computer
  • Local computer, AD site, domain, OU, child OU 

From first to last, in what order are Group Policy objects applied?

EXPLANATION

By default, Group Policy is inherited and cumulative, and it affects all computers and users in an Active Directory container.

GPOs are processed in the following order:


  •     The local GPO is applied.
  •     GPOs linked to sites are applied.
  •     GPOs linked to domains are applied.
  •     GPOs linked to organizational units are applied. For nested organizational units, GPOs linked to parent organizational units are applied before GPOs linked to child organizational units are applied.

Note  The order in which GPOs are processed is significant because when policy is applied, it overwrites policy that was applied earlier.

The Group Policy objects (GPOs) that apply to a user (or computer) do not all have the same precedence. Settings that are applied later can override settings that are applied earlier
The policies are applied in the hierarchy --> Local machines, Sites, Domains and Organizational Units.(LSDOU)
More info: Group Policy processing and precedence
http://technet.microsoft.com/en-us/library/cc785665%28WS.10%29.aspx
Step-by-Step Guide to Understanding the Group Policy Feature Set
http://technet.microsoft.com/en-us/library/bb742376.aspx

Share:

0 comments:

Post a Comment

Popular Posts