+ Reply to Thread
Page 2 of 2 First 12
Results 26 to 37 of 37
  1. Member
    Join Date
    Dec 2008
    Posts
    66

    Certifications
    MCP (70-271, 70-291,70-294,70-299)
    #26
    Quote Originally Posted by dynamik View Post
    +1

    Don't listen to that other guy
    lol, late night?
    Reply With Quote Quote  

  2. SS -->
  3. Member Extraordinaire genXrcist's Avatar
    Join Date
    Oct 2008
    Location
    St. Paul, Minnesota
    Posts
    531

    Certifications
    CCNA:V MCITP:EA/EMA2K10 MCSE:S MCSA:M MCDST A+/Net+/Sec+
    #27
    Quote Originally Posted by royal View Post
    And the one at top of the list wins.

    This is important if you're doing something like WMI filtering with 2000 machines. Since 2000 machines don't apply WMI filtering, you can trick it by placing the Windows 2000 GPO on top and the XP GPO 2nd in the list. You then apply a GPO filter so that the top GPO only applies to Windows 2000. Since XP will see this WMI filter, it'll skip the top one and apply the second one. Since 2000 can't see the WMI filter, it'll automatically just apply the first one.

    So the processing in the actual list is important.
    Hold on, I thought the GPO's were applied from the lowest priority to the highest, with the conflicts going to the sequential GPO with a higher priority? In this case, the XP machine will process GPO2 and then skip GPO1 but the W2K machine will process both GPO's.

    Correct?
    Reply With Quote Quote  

  4. Virtual Member undomiel's Avatar
    Join Date
    Sep 2007
    Location
    Bellevue, WA
    Posts
    2,813

    Certifications
    MCSA:2008, VCP4/5, CCA (XS), MCITP: EA/VA, MCSE, MCSA, Linux+, Security+, Server+, A+
    #28
    True. You would want to reverse the order so that on the 2000 machine the XP GPO is overwritten by the 2000 GPO.
    Reply With Quote Quote  

  5. Member Extraordinaire genXrcist's Avatar
    Join Date
    Oct 2008
    Location
    St. Paul, Minnesota
    Posts
    531

    Certifications
    CCNA:V MCITP:EA/EMA2K10 MCSE:S MCSA:M MCDST A+/Net+/Sec+
    #29
    Quote Originally Posted by undomiel View Post
    True. You would want to reverse the order so that on the 2000 machine the XP GPO is overwritten by the 2000 GPO.
    Forgive me but I don't understand how reversing the priority order causes the 2K GPO to overwrite the XP GPO?
    Reply With Quote Quote  

  6. Virtual Member undomiel's Avatar
    Join Date
    Sep 2007
    Location
    Bellevue, WA
    Posts
    2,813

    Certifications
    MCSA:2008, VCP4/5, CCA (XS), MCITP: EA/VA, MCSE, MCSA, Linux+, Security+, Server+, A+
    #30
    Well I will admit this was working off the assumption that they are modifying the same setting, in which case the last applied GPO (2000) is what takes precedence e.g. "overwrites". Precedence is probably a better word for it, I just always use overwrites in my head.
    Reply With Quote Quote  

  7. Member Extraordinaire genXrcist's Avatar
    Join Date
    Oct 2008
    Location
    St. Paul, Minnesota
    Posts
    531

    Certifications
    CCNA:V MCITP:EA/EMA2K10 MCSE:S MCSA:M MCDST A+/Net+/Sec+
    #31
    Quote Originally Posted by undomiel View Post
    Well I will admit this was working off the assumption that they are modifying the same setting, in which case the last applied GPO (2000) is what takes precedence e.g. "overwrites". Precedence is probably a better word for it, I just always use overwrites in my head.
    Ahhhh! I just had my 'A-Ha' moment. Thanks!
    Reply With Quote Quote  

  8. Senior Member
    Join Date
    Dec 2008
    Posts
    117

    Certifications
    MCSE: Server 2003, TS: Exchange Server 2007 Configuration
    #32
    Quote Originally Posted by NetAdmin2436 View Post
    The LDSOU order was mentioned a few times in the thread (and if I'm not mistaken here) it should actually be LSDOU and hence applied in this order:
    Local > Site > Domain > OU

    Group Policy processing and precedence: Group Policy
    This is what I remember as I learned it like this:

    Local = Local
    Shops = Site
    Do = Domain
    Prefer = Parent (OU)
    Cash = Child (OU)
    Last edited by ElwoodBlues; 07-13-2009 at 03:28 PM.
    Reply With Quote Quote  

  9. Virtual Member undomiel's Avatar
    Join Date
    Sep 2007
    Location
    Bellevue, WA
    Posts
    2,813

    Certifications
    MCSA:2008, VCP4/5, CCA (XS), MCITP: EA/VA, MCSE, MCSA, Linux+, Security+, Server+, A+
    #33
    That agrees with what NetAdmin is saying. Local --> Site --> Domain --> OU

    You just are breaking down a little bit more how the OU level is applied working one's way down the OU tree.
    Reply With Quote Quote  

  10. Senior Member
    Join Date
    Mar 2007
    Posts
    12,308
    #34
    Quote Originally Posted by ElwoodBlues View Post
    I thought this was incorrect as I learned it like this:

    Local = Local
    Shops = Site
    Do = Doamin
    Prefer = Parent (OU)
    Cash = Child (OU)
    What are you thinking is contradictory?
    Reply With Quote Quote  

  11. Senior Member
    Join Date
    Dec 2008
    Posts
    117

    Certifications
    MCSE: Server 2003, TS: Exchange Server 2007 Configuration
    #35
    Quote Originally Posted by dynamik View Post
    What are you thinking is contradictory?
    I was actually referring to your post about LDSOU and agreeing with the post I quoted; I can see how my post above may be confusing.

    I apoligize for any confusion I may have caused.
    Last edited by ElwoodBlues; 07-13-2009 at 03:27 PM.
    Reply With Quote Quote  

  12. Senior Member
    Join Date
    Mar 2007
    Posts
    12,308
    #36
    No problem. I have been proven to be an idiot in this thread
    Reply With Quote Quote  

  13. One Man Wolfpac NetAdmin2436's Avatar
    Join Date
    Mar 2008
    Location
    Minnesota
    Posts
    1,077

    Certifications
    AAS in Computer Networking, MCSE 2003, Network+, Security+, A+
    #37
    Quote Originally Posted by dynamik View Post
    No problem. I have been proven to be an idiot in this thread
    It's all good, we'll allow you 1 mistake every 9000 posts.
    Reply With Quote Quote  

+ Reply to Thread
Page 2 of 2 First 12

Social Networking & Bookmarks