1

Hi,

The question is really simple.

Which group policy would be in effect, local or the one applied via domain as GPO(s).

Or would it depend on the situation as well?

5 Spice ups
2

This diagram show it best.

gp-order-2.jpg
gp-order-2.jpg800×508 40.1 KB
4 Spice ups
3

Above is correct. If you set value in a local gpo and you don’t configure the same value in a domain or ou gpo, the local value would be valid.

4

It means, Local GP takes priority, am I right?

5

Local policies will only work when the computer in question is in a WORKGROUP, if its on a domain, the computer will download the GPO from the DOMAIN SERVER and merge the settings into the local GPO.

1 Spice up
6

No, the opposite. Local policy have least priority.

1 Spice up
7

The Local Group Policy object applies first.

GPOs inherited from the Active Directory are always stronger than local policy

Group Policy is processed in the following order:

Local Policy > Site GPO > Domain GPO > OU GPO > Child OU GPO (Child ou GPO Gets applied at last hence wins)

1 Spice up
8

To clarify what JitenSh is saying, which is the most comprehensive and correct answer above; Local policy applies first, and the value of a given policy object in the Local policy will stick if that same policy object is set as “Not configured” at all of the other levels.