AD Group Policy inheritance

virtual-fixer · 2021-07-20T17:09:52.000Z

Trying to figure this out. So under my OU I have to enforce two GPOs (link order 1 and 2). Under group policy inheritance the GPOs precedence number is 8-9. How do I change the precedence order?

Some of the GPOs under group policy inheritance are from location>Domain.
776bf4d4-e542-4900-8239-2c7e9fd7cc9b-GPO_precendence.jpg

roguerabbit · 2021-07-21T07:57:55.000Z

It can be done on the Linked Group Policy Objects tab via the triangular buttons on the left side.

f4055074-47e5-416e-ac1f-d639575faa23-2021-07-21_11_55_18-Group_Policy_Management.png

The policies apply from a top to down progression, inherited policies from OU’s higher up in the hierarchy will apply before the policies that are applied on the OU itself. If that also needs to be changed then you have to disable inheritance of policies and add all of the policies directly to the OU, then you will be able to change the order of all of the policies for that OU.

matthew-martin · 2021-07-21T23:08:36.000Z

GPO are applied in the following precedence with the lowest taking effect:

Enforced GPOs from the parent OUs.
Enforced GPOs from the current OU in link order.
Non-enforced GPOs from the current OU in link order.
Non-enforced GPOs from the parent OUs unless inheritance is disabled.

virtual-fixer · 2021-07-22T11:59:23.000Z

In a server OU, I have three GPOs.

Link 1 GPO is filtered out and not applying. Link 1 GPO is the winning GPO under the Group Policy inheritance tab.

Link PO 2 is applying and not Link 1. None of the 2 links have GPO enforced.

The delegation permissions are correct.

Any idea what could be wrong?