To enforced a policy, load GPMC, right click on the selected group policy and then select “ Enforced” option. If multiple policies been enforced, all of them will take the lowest precedence numbers in order. If domain linked policy been enforced, it will apply to any OU under the domain and it will hold the lowest precedence. Another advantage of the enforced policy is, it will apply even OU is blocked inheritance. When group policy been enforced, it will have the lowest precedence valve regardless where it’s been linked. Microsoft allows to change this default policy winning procedure by enforcing policies. There for the wining valve will be from Policy 02. The winning valve of conflicting policy settings will be decided based on LSDOU. When it comes to the Internet Explorer Settings both policies have values. For Windows Firewall Settings, only Policy 02 has a valve. There for even it’s the least preferred group policy, that valve will apply to Users OU. For Password Policy Settings, only Policy 01 has a valve defined. According to LSDOU, Policy 02 will have lowest precedence valve as it is the closest policy for the Users OU. Based on the default group policy inheritance, Users OU will have both policies applied. Each of the group policy have its own values defined for the three selected settings. Let’s look in to this further with an example,Īs per above figure we have two policies inherited to “Users” OU. Group Polices precedence order LSDOU and Group Policy Inheritance decides which policy will win in Active Directory structure.
In that case it is important to understand which policy going to win. Sometime multiple policies may target same thing. In an organization, there can be many group policies in used.
0 kommentar(er)
