The answer provided by savatovic is completed out!!!
Here is the quote :
"1. GPO does not apply to administrators. "
A : NO WAY!!! GPO by default applies to Authenticated Users and administrators are also Authenticated Users! Any users who logon to the domain where the GPO is applied is Authenticated Users!
"2. GPO's at various levels combine to form effective settings. The order is:
- Site (applied first)
- Domain
- OU (applied last) "
A : This is totally the opposite. GPO is applied in this way :
- Local computer (applied first)
- domain user
- OU
- domain
- site (applied last)
Those applied later will overwrite those applied first when there are conflicting policies. For eg. if OU set password to 30days and domainset password to 15days, password will be 15days.
"3. If there is conflict between user and computer policy, the computer policy usually wins. "
A : Another crap. Computer policy is the FIRST policy to be applied thus the least significant.
"4. GP has ability to detect slow links (less than 500 kbps). In that case, the following settings are turned off (by default):
- IE Maintenance
- Software installation
- Folder Redirection
- Script settings
- IPSec settings
- Disk Quota settings "
A : yes, it does have settings for slow links connection but I am not sure the above is correct. No further comment since don't recall much about this feature.
"5. If there are more GPO's in one container, the settings which are highest in the list apply "
A : At least this is correct. But the comment is already written on the menu!! The policies are applied from bottom to up. So, highest will have priority.
"6. And of course check inheritance and override settings. "
Hmm.....
I guess this guy must drunk when he is posting the answers seeing that he is a 10k techie.
