Options

GPO - any rules to go by?

If there is any way of knowing if a GPO is linked to the computer or to the user?

Some of the various practice tests are confusing me...one GPO will be linked to a user, another GPO to a computer...etc etc.

Just wondering if there are any general rules to follow to determine if a GPO should be linked to a User / Computer / OU?

Comments

  • Options
    blargoeblargoe Member Posts: 4,174 ■■■■■■■■■□
    Well there are some settings that only make sense for users, some that only make sense for computers, and some that can go either way. Security settings are always going to be computer settings from what I have seen, for example.
    IT guy since 12/00

    Recent: 11/2019 - RHCSA (RHEL 7); 2/2019 - Updated VCP to 6.5 (just a few days before VMware discontinued the re-cert policy...)
    Working on: RHCE/Ansible
    Future: Probably continued Red Hat Immersion, Possibly VCAP Design, or maybe a completely different path. Depends on job demands...
  • Options
    royalroyal Member Posts: 3,352 ■■■■□□□□□□
    User GPO overrides Comptuer GPOs for those settings that are both in the computer section and user section There are some exceptions to this. For example, in Terminal Services, Computer section will override the User section.

    Also, you can see what GPO is being applied by using the command gpresult. Also, if you go to Start > run > mmc, you can add the Resultant Set of Policy snap-in to view specifically what is being applied to a specific computer and user.
    “For success, attitude is equally as important as ability.” - Harry F. Banks
  • Options
    bcairnsbcairns Member Posts: 280
    icroyal wrote:
    User GPO overrides Comptuer GPOs for those settings that are both in the computer section and user section There are some exceptions to this. For example, in Terminal Services, Computer section will override the User section.

    Also, you can see what GPO is being applied by using the command gpresult. Also, if you go to Start > run > mmc, you can add the Resultant Set of Policy snap-in to view specifically what is being applied to a specific computer and user.

    Was just reading about that tonight. thanks
Sign In or Register to comment.