GPO - any rules to go by?

bcairns

If there is any way of knowing if a GPO is linked to the computer or to the user?

Some of the various practice tests are confusing me...one GPO will be linked to a user, another GPO to a computer...etc etc.

Just wondering if there are any general rules to follow to determine if a GPO should be linked to a User / Computer / OU?

blargoe

Well there are some settings that only make sense for users, some that only make sense for computers, and some that can go either way. Security settings are always going to be computer settings from what I have seen, for example.

royal

User GPO overrides Comptuer GPOs for those settings that are both in the computer section and user section There are some exceptions to this. For example, in Terminal Services, Computer section will override the User section.

Also, you can see what GPO is being applied by using the command gpresult. Also, if you go to Start > run > mmc, you can add the Resultant Set of Policy snap-in to view specifically what is being applied to a specific computer and user.

bcairns

icroyal wrote:

User GPO overrides Comptuer GPOs for those settings that are both in the computer section and user section There are some exceptions to this. For example, in Terminal Services, Computer section will override the User section.

Also, you can see what GPO is being applied by using the command gpresult. Also, if you go to Start > run > mmc, you can add the Resultant Set of Policy snap-in to view specifically what is being applied to a specific computer and user.

Was just reading about that tonight. thanks