Sign up to access this lesson
Click here to sign up and get access to this lesson!

Saving Progress...
In this lesson, we will explain Group Policy Precedence.

Now, precedence means the order or the way things are done. With Group Policy there’s a specific order in which GPO or Group Policy settings are applied. It is important to understand this since from time to time you’ll have multiple GPOs trying to configure the same setting and you need to understand the precedence in order to understand which settings will be applied and which settings will be ignored.
Now, the order in which GPO runs is the following:

Now we have to consider Computer vs. User. Within a GPO you have a Computer and a User configuration. The Computer Configuration applies first and the configuration of a User applies second. The settings applied last will win.

The Computer configuration is the least important and the User configuration is the most important.

Now let’s take a Wallpaper scenario. Let’s say we have 5 GPOs that are configuring the same Wallpaper settings with different images. Which GPO will win?

Let’s remember the LSDOE acronym (Local, Site, Domain, OU, Enforced).
- LOCAL
In this scenario, the Local is applied since nothing else is configured.

- SITE
In a Site scenario, Site Policy takes precedence over Local Policy so the last one will win.

- DOMAIN
In a Domain scenario, the Domain Policy takes precedence over Site and Local policies.

- OU
In an OU scenario, the OU Policy will overwrite the Domain, Site, and Local policies.

- SUB OU
In a Sub OU scenario when assigning a policy at this level it will take precedence and overwrite all previous ones.

Enforced
In an Enforced scenario when we apply for example to the Domain policy itflee.com at the Domain level, since it is the last item on LSODE, Enforced will take precedence over all the other GPOs.
Blocked Inheritance
This is a term that is used when it comes to OUs. An OU can block its inheritance which means only GPOs inside that OU will apply except for enforced GPOs that are above the OU. To block inheritance you just right-click on the OU and choose Block Inheritance.

Now let’s see another example.
We have the following GPOs. In this particular scenario, we have a Sub OU policy pauliscool.jpg and the last will win.

Now, let’s say we blocked inheritance.
When blocking inheritance with a blue exclamation mark, then just the pauliscool.jpg is applied to the Administrators OU.

Now, what if we enforced the GP itflee.jpg. The icon will change to a GP with a lock icon meaning the GP is enforced. Here itflee.jpg will take precedence because it is enforced.

In conclusion, remember the last GPO to be applied wins and LSDOE acronym (Local, Site, Domain, OU, Enforced).

Now you understand Group Policy precedence.
Sign up to access the rest of this lesson
You must either log in or sign up to access this lesson.
CURRICULUM
Course Introduction • 1min
0 / 1 lessons complete
Introduction to Group Policy Management • 1hr 24min
0 / 6 lessons complete
What is Group Policy
Video | 6 min
Creating and Managing GPOs
Video | 18 min
Group Policy Precedences
Video | 9 min
Editing Group Policy Object Settings
Video | 7 min
Introduction to Group Policy Quiz
Quiz | 14 Questions
Lab: Group Policy Management
Lab | 30 min
Manage Your Workstations • 1hr 46min
0 / 7 lessons complete
Deploying a Desktop Background to your domain with GPO (Group Policy Object)
Video | 12 min
Setting up a Logon Banner (Interactive Logon)
Video | 5 min
Deploying Software with Group Policy
Video | 11 min
Configuring Roaming Profiles for User Accounts
Video | 10 min
Configure User Roaming Profile Path with PowerShell
Video | 7 min
Creating and Mounting File Shares with Group Policy
Video | 16 min
Lab: Manage Your Workstations with Group Policy
Lab | 45 min
Securing Your Domain • 54min
0 / 5 lessons complete
Configuring Domain Password and Account Lockout Policies with Group Policy
Video | 0 min
Deploying Fine Grained Password Policies (PSOs)
Video | 11 min
Configuring Windows Firewall with Group Policy
Video | 6 min
Configuring Registry Settings with Group Policy
Video | 6 min
Lab: Securing Your Domain with Group Policy
Lab | 30 min
Group Policy Troubleshooting • 53min
0 / 5 lessons complete
Troubleshooting Group Policy with MMC (RSOP.msc - Resultant Set of Policy)
Video | 4 min
Troubleshooting Group Policy with Command Prompt (GPResult /r)
Video | 5 min
Creating Non-Inheriting Organizational Units for GPO Testing / Troubleshooting
Video | 9 min
Group Policy Troubleshooting Quiz
Quiz | 5 Questions
Lab: Group Policy Troubleshooting
Lab | 30 min
Course Conclusion • 1min
0 / 1 lessons complete