none
Group Policy RRS feed

  • Question


  •  Hello Team,


     Please explain how group policy deploy on client computer. I just want to understand how group policy get applied on client pc or user. And if the system is already applied policy and we have done some changes then how process will work means it;s get all policy or get only last change policy.


    Regards,

    Yogesh - Team Admin


    Wednesday, September 27, 2017 5:42 PM

All replies

  • There is a lot of stuff to discuss.

    You should take a look at these articles, it may help you understand more how GPO's are working

    Group Policy for Beginners
    https://technet.microsoft.com/en-us/library/hh147307(v=ws.10).aspx

    How Core Group Policy Works
    https://technet.microsoft.com/en-us/library/cc784268(v=ws.10).aspx

    Step-by-Step Guide to Understanding the Group Policy Feature Set
    https://msdn.microsoft.com/en-us/library/bb742376.aspx

    hth


    This posting is provided AS IS without warranty of any kind

    Thursday, September 28, 2017 3:26 AM
  • Hi,
     
    Based on my research, I'd like to explain that Group Policy Object (GPO) consist of Group Policy Container (GPC) and Group Policy Template (GPT). GPC is an Active Directory Object that contains general information about the GPO, you could find GPC under Active Directory Users and Computers > Domain Name > System > Policies. GPT contains specific policy settings which is stored in a GUID-named folder under C:\Windows\SYSVOL\domain\Policies, it is a shared folder under \\DomainName\SYSVOL\DomainName\Policies either. Also, Policy settings consist of Computer Configuration which is applied to computers and User Configuration which is applied to users. In addition, GPO can only be linked to Sites, Domains or Organizational Units (OU).

    When a client computer boots, you might see a “Applying Computer Settings” screen, this process is actually searching the OU which the client computer belongs to, then reading the GPC on that OU, GPC points to the location of GPT. Finally, the client computer access the share folder of the GPT to get the specific policy settings. After pressing “Ctrl+Alt+Delete” and login, you might see a “Applying User Settings” screen, this process is similar to “Applying Computer Settings”.

    >> And if the system is already applied policy and we have done some changes then how process will work means it;s get all policy or get only last change policy.
    Based on this question, I’d like to explain that each GPO has a version number, you could find it under Group Policy Management > GPO > Details, when modifying a GPO, it’s version number will increase. Clients will match the version numbers first. If version numbers is consistent, then nothing changes. And if not, clients will processes the necessary portions of the policy.
    Furthermore, by default, computer Group Policy is updated in the background every 90 minutes, with a random offset of 0 to 30 minutes. In addition to background updates, Group Policy for the computer is always updated when the system starts.

    For more information about Group Policy structure, you could refer to the following article:
    Group Policy Basics – Part 1: Understanding the Structure of a Group Policy Object
    https://blogs.technet.microsoft.com/musings_of_a_technical_tam/2012/02/13/group-policy-basics-part-1-understanding-the-structure-of-a-group-policy-object/
    Group Policy Basics – Part 3: How Clients Process GPOs
    https://blogs.technet.microsoft.com/musings_of_a_technical_tam/2012/02/22/group-policy-basics-part-3-how-clients-process-gpos/
    Group Policy refresh interval for computers
    https://technet.microsoft.com/en-us/library/cc940895.aspx

    If you need further help, please feel free to let us know.
     
    Best Regards,
    Albert Ling

    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, September 28, 2017 4:42 AM
  • Hi,

    Just checking in to see if the information provided was helpful.

    Please let us know if you would like further assistance.

    Best Regards,
    Albert Ling

    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, October 3, 2017 4:09 AM
  • Hi,

    I am checking how the issue is going, if you still have any questions, please feel free to contact us.

    If you resolved it using our solution, please "mark it as answer" to help other community members find the helpful reply quickly.
    If you resolve it using your own solution, please share your experience and solution here. It will be very beneficial for other community members who have similar questions.
    If no, please reply and tell us the current situation in order to provide further help.

    Appreciate for your feedback.

    Best Regards,
    Albert Ling

    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, October 9, 2017 8:37 AM