1

hi,

if i have a ou with several gpo’s for instance

  1. gpo1 has only 1 setting, not the same as 2 or 3

  2. gpo2 has only 1 setting not the same as 1 or 3

  3. gpo 3 has only one setting not the same as 2 or 1

if i’m right , 1 has precidence over 2 and 3 meaning 3 gets processed 1st, then 2, 2nd and 1 last. even if this is wrong, what keeps the last gpo processed from undoing the other 2?

If it is the way i said, are you supposed to have the gpo’s in which it has settings 3 and settings 2 in gpo 1?

Thanks

2 Spice ups
2

GPOs are cumulative - you can have as many GPOs as you like providing different settings and they will all be applied. Settings with a default value of “Not configured” will not overwrite a specified setting.

Where you need to be careful is when you have defined the same setting in two or more different GPOs with conflicting values, in which case application order matters. The closer to the OU the GPO is, the more precedence it has, then the link order on the individual OU determines the precedence for multiple GPOs linked to that OU.

Edit: sorry, default value is not “not defined”. Serves me right for posting from my phone at lunch without having gpedit in front of me :stuck_out_tongue:

2 Spice ups
3

Precedence is the inverse of the order they get processed in. If the GPOs are in the same OU and gpo1 is the first in order then it has the lowest precedence, not the highest.

However, keep in mind that any settings that are set to “Not configured” in a GPO that is processed later in the line do not override settings that were configured by any gpo that was processed prior to that one. Another way to say this is that GPOs overlap each other rather than necessarily override each other. For example, if gpo1 only locks the taskbar, gpo2 only sets the desktop background, and gpo3 only sets the screen saver timeout then all those policy settings will get applied as opposed to only the screen saver timeout getting set.

1 Spice up
4

Thanks for the answers!