1

when do local GPOs apply if a computer is a part of a domain? What would be an example scenario when local GPOs would be relevant for a computer that is a part of a domain? Can I somehow 'use' local GPOs even if the computer is a part of the domain?

I ask because I want to understand the difference between local GPOs and domain GPOs and how they differ / how they are interrelated.

Regards.

1 Answer 1

6

Local policies apply first; this means that their settings apply to the system, but are overridden by a setting from a linked domain GPO at any level.

Essentially, it's the lowest precedence location in which policies can be applied. You can set whatever you want, as long as no domain policy sets the same thing.

Take a gander here for lots more information on GPO processing order.

3
  • 1
    Group Policy processing occurs in the following order: LSDOU = Local, Site, Domain, OU.
    – joeqwerty
    Dec 30, 2011 at 3:37
  • @joeqwerty Major extra nerd points if you've got a mnemonic for that. Dec 30, 2011 at 3:44
  • 1
    All People Seem To Need Data Processing... wait... that's for something else... but what?... can't remember...
    – joeqwerty
    Dec 30, 2011 at 3:47

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .