Re: GPO Limts

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hi
The GPO is applied in the following order:

- Local>Site>Domain->OU->Sub OU, etc.

- The exception to these rules is block policy inheritance, Enforce Policy
or loopback policy.

- The Computer section of a GPO is applied during boot-up. The User section
of a GPO is applied at user login

- The policies within the same container with higher priority are the last
ones to apply which means that in case of policy conflict these last ones
"Wins".

- To check which policies are being applied run gpresult or rsop.msc.
-The problem with many policies to be applied as to do with performance in
computers boot process and users logon.
--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator
"matt" <matt@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1811E1F3-4EE8-406C-85D4-0C868E46F0E2@xxxxxxxxxxxxxxxx
I have a domain that was set up before me. It has a few problems, not sure
where to start.

one question is there a limt to GP's the way the domain is set up now is

root (Domain GP applied)
Computer OU (diffrent GP applied with same entrys)
Site location OU (has a few workstations)(diffrent GP applied with
same entrys as both root and computer)
Sub Site OU (has workstations)(diffrent GP applied with same
entrys
as both root, computer and Site)
Users OU (diffrent GP applied with same entrys as root)
Site Users OU (has a few users) (diffrent GP applied with same
entrys
as root and users)
Sub Site OU (has users)(GP applied) (diffrent GP applied with same
entrys as root, users and sub)

The reason I was told this is set this way is cos the GP's don't get
applied
right. some stop at the computer and some stop at the site. would like
some
feed back on this set up. the only changes to the GP's is the warning
baner
each one has the name of the OU so they would know what one was applied
last.

Is there some logon script to see what GP's are geting applied 1st and
last
and what ones are being droped?

thanks


.

Relevant Pages

  • Re: GPO Limts
    ... or loopback policy. ... The exception to these rules is block policy inheritance, ... Computer OU (diffrent GP applied with same entrys) ... same entrys as both root and computer) ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO Limts
    ... Also use rsop.msc and drill down through the settings being applied. ... Another problem with having the same GPO linked to different OUs as to do ... Computer OU (diffrent GP applied with same entrys) ... same entrys as both root and computer) ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO Limts
    ... Also use rsop.msc and drill down through the settings being applied. ... Another problem with having the same GPO linked to different OUs as to do ... Computer OU (diffrent GP applied with same entrys) ... same entrys as both root and computer) ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO Limts
    ... Another problem with having the same GPO linked to different OUs as to do ... or loopback policy. ... Computer OU (diffrent GP applied with same entrys) ... same entrys as both root and computer) ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password Aging and System Accounts
    ... > have a policy where they don't age their root passwords? ... the Policy of password aging apply to the root account, ... Logins from the system console as root are ...
    (comp.unix.admin)