Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

How do group policies work?

Posted on 2014-07-24
3
Medium Priority
?
131 Views
Last Modified: 2014-09-09
Can someone give me a link that explains how GPO is applied to machine from DC? I want to know if it cant hit primary DC does it round robin until it gets one it can hit? What determines what order the DC's are contacted? Thanks
0
Comment
Question by:Thomas N
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 10

Expert Comment

by:Rafael
ID: 40217602
Have you tried Group Policy informational guide from Microsoft ? It's good reading and breaks down as you need.
0
 

Author Comment

by:Thomas N
ID: 40217633
I dont have time to read that whole guide. Can you just tell me what happens when a machine logs in to get GPO, it checks its logonserver for policy but what determines where it goes next if the server is busy? Thanks
0
 
LVL 10

Accepted Solution

by:
Rafael earned 2000 total points
ID: 40219977
Well, for policies, if it doesn't get a response from it's logon server, it will try to contact any other DC in the same site (pool) and then the domain as itself, if several DC's exist in the same site it uses a unpublished not quite round robin process to pick one that tends to weigh it with about 70% of the logon going to the first one in the list (top down) and 30% spread out for the others in the site.

If no DC in the same site pool responds then it'll query DNS and randomly selects one from the any DC or the domain regardless of site, tried in that order. Finally, if there are no logon servers then the user is logged in via cached credentials if enabled.

HTH
-Rafael
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Let's recap what we learned from yesterday's Skyport Systems webinar.
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question