Quick question for the AD GPO Experts…

OU has 2 GPO’s linked to it
GPO #1 has a setting that is enabled (link order 1)
GPO #2 has the same setting that is Not Configured (link order 2)
Is the final result enabled or not configured. From my testing, it is enabled, however I just want to verify this is the correct thinking and perhaps something to verify it.

7 Spice ups

The final setting would be enabled…

In each GPO, only the settings that are enabled, or disabled are read. Those not configured are ignored.

1 Spice up

Enabled. Not Configured is just that, not configured - so there is no conflict. The only time you would have to worry about link order would be if the second GPO was set to something different…like disabled.

5 Spice ups

Ty all

Yes final will be Enabled.

not configured wont do anything, only enable/disabled do the magic :slight_smile:

That’s is why you can have multiple GPOs on the same OU and unless there is two overlapping setting things will work fine.

Last question, anyone got a utility to compare 2 GPO’s. Trying to figure out why the previous guy had so many.

Many as in different GPOs?

Like one for desktops, one for laptops. Just trying to find out why he had 2 without combing thru all the settings. Just wanna see the delta’s. Googl’ing around now…

1 Spice up

I’ll leave this here for others.

Use Group Policy Management Console to save the GPO’s as XML files, open them in Notepad++and press Alt-D to compare the files.

1 Spice up

I usually compare them side by side :stuck_out_tongue:

This plugin is sooo much better. I found the differences in a few seconds, wow!

1 Spice up