Information Technology Reference
In-Depth Information
CHAPTER 6
policy
Group Policy is at the core of computer and user management in the Active Directory
domain environment. With each release of Windows Server, the options and flexibility of
Group Policy have improved. This chapter covers the configuration and management of
Group Policy and how to ensure that it does what you want it to.
Objectives in this chapter:
■
Objective 6.1: Configure Group Policy processing
■
Objective 6.2: Configure Group Policy settings
■
Objective 6.3: Manage Group Policy Objects (GPOs)
■
Objective 6.4: Configure Group Policy Preferences (GPP)
The processing order and the filtering of Group Policy control which policies are applied
to which users and computers. By understanding and controlling the processing order,
you can understand and control which policies have the final impact on a given Active
Directory object. Local Group Policy is processed first; then each Active Directory level is
processed from the farthest away from the object (the site) to the closest to the object (the
organizational unit [OU]). This processing order is known as LSDOU: Local, Site, Domain,
Organizational Unit.
