Discussion Locked

Group Policy Order

0 helpful
1 reply
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Can you tell me how to find out which GPO's apply to a username and computer please.

1 reply

by curiousjp

Your title and your question are asking two different questions, I will try to help.

Order of precedence for GPO's:
Local, Site, Doamin, OU
L,S,D,O

Ex. A policy applied to an OU will overite a policy applied to D, S, or L, unless "no overide" is currently set on the GPO.

Open up the MMC and the add-in "Group Policy". You will be presented with the "Select Group policy" screen. Select "browse", then select the "All" tab.

Policies look familiar? Hope so!

In ADUC,
I would start at your Users OU and check the GPO tab. If there is not a policy for this OU, then check the domain GPO, then if needed any Site GPO, and then Local. Recall your order of GPO precedence.

This will also apply for tracking all GPO's for your computers.

Hopefully you will find what you are looking for by simply checking the properties of your users OU's policies.

This discussion is closed to new replies.