+ Reply to Thread
Results 1 to 4 of 4
  1. Senior Member
    Join Date
    Jan 2003
    Location
    Orange County, CA.
    Posts
    337

    Certifications
    A+, Network+, MCP - Windows XP, MCSA - Windows Server 2003, MCTS - Exchange Server 2007
    #1

    Default Group Policy: User or Computer configuration?

    Which one takes precedence, the user or computer configuration in a GPO?

    Lets say that I have a computer in the Computers OU and a user in the Users OU. What if the user in the Users OU logs onto a computer in the Computers OU and both OUs have different GPOs.

    Which one wins?
    Reply With Quote Quote  

  2. SS -->
  3. Senior Member
    Join Date
    Sep 2005
    Location
    Toledo, Ohio
    Posts
    357

    Certifications
    Bsc. IT A+,NET+,CST,CNST, MCSA 2003,MCDBA: Next on the hitlist --> LPIC, OCP
    #2

    Default Re: Group Policy: User or Computer configuration?

    Quote Originally Posted by w^rl0rd
    Which one takes precedence, the user or computer configuration in a GPO?

    Lets say that I have a computer in the Computers OU and a user in the Users OU. What if the user in the Users OU logs onto a computer in the Computers OU and both OUs have different GPOs.

    Which one wins?
    the answer would be Computer configuration.......User config only apply to local or domain users....while computer config is lock to the machine itself......
    Reply With Quote Quote  

  4. mikej412's caddy sprkymrk's Avatar
    Join Date
    Feb 2006
    Location
    Charleston, SC
    Posts
    4,976

    Certifications
    MCP (NT4 Server), MCSA 2000, MCSA 2003, CCNA, Security+, Network+
    #3
    If you search for "Order of Events in startup and logon" in Start > Help and Support Center you'll find the following:

    Step 3 - Computer policy is applied. These are the settings under Computer Configuration from the gathered list. This is synchronous by default and in the following order: local, site, domain, organizational unit, child organizational unit, and so on. No user interface appears while computer policies are processed.

    Step 8 - User policy is applied. These are the settings under User Configuration from the gathered list. This is synchronous by default and in the following order: local, site, domain, organizational unit, child organizational unit, and so on. No user interface appears while user policies are processed.
    However, this can be modified by using User Group Policy loopback processing mode in the Computer Configuration settings. Using Loopback with Replace the Group Policy object list for the user is replaced by the Group Policy object list for the computer.
    In Loopback with Merge the Group Policy object list is merged. The Group Policy object list that is obtained for the computer is applied later, and therefore it has precedence if it conflicts with settings in the user's list.

    As a final note however, it should be noted that anything you set in the Computer Settings policies ONLY apply to computers, while only USERS are affected by settings in the User policies. It is only in the case of a conflict that you need to worry about "who wins".
    Reply With Quote Quote  

  5. Senior Member
    Join Date
    Nov 2005
    Posts
    302

    Certifications
    CCNA,MCP, MCSA, MCSA:Security, MCSA:Messaging, MCSE, MCSE: Security, CompTIA Security+, network+ and linux+
    #4
    As sprkymrk says,

    First the Computer GPO gets applied and then the User GPO.

    Loopback processing mode forces the Computer GPO over the user GPO (if in replace mode)
    Reply With Quote Quote  

+ Reply to Thread

Social Networking & Bookmarks