Thursday, 28 March 2013

TechNet Group Policy processing and precedence

Okay so you have local group policies on your PCs and several policies that have been setup by colleagues over time at various levels within active directory. What takes precedence, Local, Site, Domain or OU?

Order of precedence of policy types

The Local machine policies are applied first then Site, Domain and OU Polices are executed from the topmost OU down through the various child OUs until finally you execute any Policy attached to the OU that contains the computer. The Policy applied last has the greatest precedence.

What if multiple Policies are Linked to an OU, Site or Domain ? 

There is only one Local Policy on an individual PC however their can be multiple policies linked to a Site, Domain and OU levels.

Processing is in the order that is specified by the administrator, on the Linked Group Policy Objects tab for the site in Group Policy Management Console (GPMC). The last to process has the highest precedence.

For further information:

TechNet: Group Policy processing and precedence

Other Relevant TechNet Documents:

Deployment considerations for Group Policy
Controlling the Scope of Group Policy Objects using GPMC

No comments:

Post a Comment