Enterprise Computing
Group Policy
Group Policy Enhancements in Windows 7
Group Policy Inheritance
- Group Policy objects can be linked to the Active Directory domains, OUs, and Active Directory sites. Each Windows 7 computer can have local Group Policy objects.
- GPOs are applied in the following order:
- Local computer
- Site
- Domain
- Parent OU
- Child OU
- All of the individual GPO settings are inherited by default. At each level, more than one GPO can be applied to a user or computer.
- The steps to determine which policy settings to apply, include:
- If there is no conflict, the settings for all policies are applied
- If there is a conflict, later settings overwrite earlier settings
- If the settings in a computer policy and user policy conflict, apply settings from the computer policy