Processing order of Group policy

1:/Deafult (the original windows settings)

2:/ Local Group Policy object

3:/ Site

3:/ Domain

4:/OU (Highest in the Active Directory hierarchy are processed first)

The last group policy applied is the settings which are applied to the computer or user.

Enabling a Block Inherence on a OU stop any group policy above the this OU being applied. (Some Default Domain policy security settings are allowed to be applied)

Setting enforced on group policy overwrites any below group policy object and ignores Block inherence set on an OU.

Loop back policy,This can be applied on a OU via a group policy. Then this group policy is applied last,This is handy when you want to set user setting only to be applied to a user when then log on to a terminal server.

 

 6,476 total views,  1 views today