GPO and OU flow

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

In a OU a have 4 GPOs linked.
Which one will be applyed first ? The one in the top or the last one ?
 
Another very good basic question! Actually, these types of questions are
very helpful for a lot of people learning!

If you are using the Active Directory Users and Computers MMC and you right
click on an OU and select Properties and then click on the Policy tab you
will see the four GPOs. First, the one on the bottom is processes. Then,
the one directly above that is processed. Then, the one above that and
finally the one listed at the top is processed. So, it starts at the bottom
and finishes at the top!

Should there be something common in multiple GPOs then the last one
processed wins! So, if there was something common with the GPO listed at
the bottom and the GPO listed at the top the setting from the GPO listed at
the top would win ( as it is processed last ).

--
Cary W. Shultz
Roanoke, VA 24012
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com
 
And to add some more info on GPOs :)
The processing order of GPOs are:

1. Local
2. Site
3. Domain
4. OU

This means that the setting that is closest (AD hierarchy) to the affected
object (user or computer) will take precedence. In other words, if a there
is a conflicting setting between a Domain GPO and an OU GPO the OU setting
will "win". BUT notice that I have not considered environments where you use
Enforce/Block Inheritance/Group Filtering, just the default scenario...

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Directory Services
---------- www.qadvice.com ----------
 
Oh... I should have read the other post (GPO Flow) since this is already
answered.... :|

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Directory Services
---------- www.qadvice.com ----------
 
Back
Top