locked
If two different GPO have few common settings then which one will apply RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    My OU structure is like FACILITIES--->India-->Mumbai, Pune. FACILITIES is root OU then India will be sub OU and then Mumbai, Pune will be under India OU. I have applied a GPO  under FACILITIES to add 3 groups A, B , C in local computer as administrator. Now I have to apply one GPO under Mumbai which will have setting to Add only group A as local Admin and remove B, C from local Administrator.

    My question is which GPO will win between FACULTIES or Mumbai?

    Arif

    Friday, July 24, 2020 6:14 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote
    Hello,

    Thank you for posting in our TechNet forum.

    By default, Group Policy is inherited and cumulative, and it affects all computers and users in an Active Directory container.

    When we link a GPO to an OU, the GPO applies to the computers and users in every child OU. This concept is called inheritance.  

    If you apply a GPO to a branch, any limb of that branch receives he same GPO unless explicitly blocked. Similarly, if you apply a GPO at the root, all branches receive the GPO, too. So unless you expressly prohibit inheritance, anything applied at the top, is applied underneath it.

    In general, the order in which Group Policy applies GPOs determines precedence. The order is site, domain, OU, and child OUs. As a result, GPOs in child OUs have a higher precedence than GPOs linked to parent OUs, which have a higher precedence than GPOs linked to the domain, which have a higher precedence than GPOs linked to the site. 

    So if a policy in the lower-level child OU is set, this setting value will override the setting value inherited by its higher-level parent OU. In general, the setting in the lower-level OU will not affect the setting in higher-level OU. So the GPO under Mumbai will win.

    Overriding and Blocking Group Policy
    https://docs.microsoft.com/en-us/previous-versions/windows/desktop/policy/overriding-and-blocking-group-policy

    For any question, please feel free to contact us.

    This "Group Policy" Forum will be migrating to a new home on Microsoft Q&A, please refer to this sticky post for more details. 

    Best regards,
    Hannah Xiong

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    "Group Policy" forum will be migrating to a new home on Microsoft Q&A!
    We invite you to post new questions in the "Group Policy"  forum's new home on Microsoft Q&A!
    For more information, please refer to the sticky post.
    Friday, July 24, 2020 9:21 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Hello,

    Just checking in to see if the provided information was helpful. If the replies as above are helpful, we would appreciate you to mark them as answers. 

    Please let us know if you would like further assistance. Thanks.

    Best Regards,
    Hannah Xiong

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    "Group Policy" forum will be migrating to a new home on Microsoft Q&A!
    We invite you to post new questions in the "Group Policy"  forum's new home on Microsoft Q&A!
    For more information, please refer to the sticky post.
    Monday, July 27, 2020 6:39 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Hello,

    Does this question have any update or has this issue been solved? Also, for the question, is there any other assistance we could provide?

    Thank you so much for your time and support.

    Best regards,
    Hannah Xiong

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, July 29, 2020 5:40 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    There is clearly way to verify any suggestion - just use embedded Group Policy Modeling in such case.
    Wednesday, July 29, 2020 6:07 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    My question is which GPO will win between FACULTIES or Mumbai?

    Arif

    Mumbai. The explanation:

    By default, Group Policy is inherited and cumulative, and it affects all computers and users in an Active Directory container.

    GPOs are processed in the following order:

    1. The local GPO is applied.
    2. GPOs linked to sites are applied.
    3. GPOs linked to domains are applied.
    4. GPOs linked to organizational units are applied. For nested organizational units, GPOs linked to parent organizational units are applied before GPOs linked to child organizational units are applied.

     Note

    The order in which GPOs are processed is significant because when policy is applied, it overwrites policy that was applied earlier.

    Wednesday, July 29, 2020 11:58 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Hello,

    Since the thread is quite for days, can we think that it is fixed? If that is the case, please "mark it as answer" to help other community members find the helpful reply quickly. 

    Thanks for your understanding and efforts.

    Best regards,
    Hannah Xiong

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, July 31, 2020 3:07 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Hello,

    Greetings!

    As this technet forum will be read-only since 8/10, in order to provide support for you conveniently, we have posted the same thread as this case on the Microsoft Q&A forum for you. 

    If you need further help about this case, welcome to go to the Q&A forum to continue consulting. 

    So sorry for the inconvenience, thank you so much for your understanding and support.

    New case link:
    https://docs.microsoft.com/en-us/answers/questions/61656/if-two-different-gpo-have-few-common-settings-then.html
    Best regards,
    Hannah Xiong

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, August 7, 2020 8:38 AM