Link to home
Start Free TrialLog in
Avatar of jskfan
jskfanFlag for Cyprus

asked on

Group Policy Link Order

Group Policy Link Order

In the case where I have  GPOs displayed in the link order below:
User generated image
Assuming  the GPOs Negate each other.  one disables Control Panel access to users and the other enables it.
Which one will win ?  does it follow the bigger number ? for instance 2 will override 1, or  the placement in the console ? for instance GPO "wallpaper" will override GPO "test"

Thank you
ASKER CERTIFIED SOLUTION
Avatar of Jeff Glover
Jeff Glover
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Hello There
Hello There

Remember the LSDOU rule which tells you the order how GPOs are applied:
Local GPO
Site GPO
Domain GPO
OU GPO
= if you have two policies, the closes GPO wins

If several GPOs are linked to an organizational unit, their processing is in the order that is specified by the administrator, on the Linked Group Policy Objects tab for the organizational unit in GPMC. The GPO with the lowest link order is processed last, and therefore has the highest precedence.

Please read this to better understand the GPO processing and precedence.
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc785665(v%3dws.10)