[jedi/old/i-menu.htm]
3TGKB-0032

Last Edited :

18-10-06

Revision :

 2.0


Group Policy Processing Order?

 

Ever wondered what order Group Policy is applied in and what Policies are dominant?  Here is a little helper, I hope?

    LOCAL GPO -  this is a Group Policy Template portion.  The location of the LGPO is \%systemsroot%\system32\grouppolicy\

    SITE

    DOMAIN

    OU

    Sub-OU

    Sub-Sub-OU

 


Normal Order of Processing

 

Computer is turned on!

 

Computer - Start Up

1st Process Local Machine Group Policy
2nd The Computer finds out where the Computer is located in the Active Directory  
3rd The Computer applies the Computer settings from Group Policy Objects based on the location of the Computer in the Active Directory  
     

The Logon Dialog Box displayed

 

User - Logon

4th The Computer finds out where the User is located in the Active Directory  
5th The Computer applies the User settings from Group Policy Objects based on the location of the User in the Active Directory  
     

The Users desktop is displayed

 


Loopback?  Replace Mode

 

Computer is turned on!

 

Computer - Start Up

1st Process Local Machine Group Policy
2nd The Computer finds out where the Computer is located in the Active Directory  
3rd The Computer applies the Computer settings from Group Policy Objects based on the location of the Computer in the Active Directory  
     

The Logon Dialog Box displayed

 

User - Logon

4th The Computer finds out where the Computer is located in the Active Directory  
5th The Computer applies the User settings from Group Policy Objects based on the location of the Computer in the Active Directory  
     

The Users desktop is displayed

 


Loopback?  Merge Mode

 

Computer is turned on!

 

Computer - Start Up

1st Process Local Machine Group Policy
2nd The Computer finds out where the Computer is located in the Active Directory  
3rd The Computer applies the Computer settings from Group Policy Objects based on the location of the Computer in the Active Directory  
     

The Logon Dialog Box displayed

 

User - Logon

4th The Computer finds out where the User is located in the Active Directory  
5th The Computer applies the User settings from Group Policy Objects based on the location of the User in the Active Directory  
6th The Computer finds out where the Computer is located in the Active Directory  
7th The Computer applies the User settings from Group Policy Objects based on the location of the Computer in the Active Directory  
     

The Users desktop is displayed

 

Regards

Matt Rowston


KB Keywords:  Group Policy, Processing, Loopback, Merge Mode, Replace Mode, Active Directory