Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

when do local GPOs apply if a computer is a part of a domain? What would be an example scenario when local GPOs would be relevant for a computer that is a part of a domain? Can I somehow 'use' local GPOs even if the computer is a part of the domain?

I ask because I want to understand the difference between local GPOs and domain GPOs and how they differ / how they are interrelated.


share|improve this question
up vote 6 down vote accepted

Local policies apply first; this means that their settings apply to the system, but are overridden by a setting from a linked domain GPO at any level.

Essentially, it's the lowest precedence location in which policies can be applied. You can set whatever you want, as long as no domain policy sets the same thing.

Take a gander here for lots more information on GPO processing order.

share|improve this answer
Group Policy processing occurs in the following order: LSDOU = Local, Site, Domain, OU. – joeqwerty Dec 30 '11 at 3:37
@joeqwerty Major extra nerd points if you've got a mnemonic for that. – Shane Madden Dec 30 '11 at 3:44
All People Seem To Need Data Processing... wait... that's for something else... but what?... can't remember... – joeqwerty Dec 30 '11 at 3:47

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.