Win2k3 group policy

[Danny Lai]

Hi,

I'm trying to create a group policy in the DC so that all users can have the same policy settings applied to them. How do I push this group policy down to the user after creating it? If there is a local policy already in the user's PC, will the group policy have higher precedence over it?

Please advise. Thanks.

br

Danny

[Gary Cooper_1 · Accepted solution]

Hi Danny,

If it's a computer policy it should be applied (picked up) the next time the (client) computer is rebooted. If it's a user policy it should be applied (picked up) the next time the user logs on.

You can also do a 'gpupdate /force' on the client computer to make it pick the Group Policy up.

Group policies applied by the DC are applied after the local group policy on the workstation.

Don't forget you can use gpresult on the workstation to check what policies have been applied.

Regards,

Gary

[Arch_Muthiah]

Using Active Directory Sites and Services console. you can create group plocies.

We can create group ploicies in difft level such as
1. Local Group Policy object
2. Site
3. Domain
4. Oraganizational level

these policies can be combined for computer level and lastly to the user level. The computer and user level policy settings are difft from the above group policies.

The lowest level is user and the highest level which can override all other policy setting is organization policies.

Archunan

[Arch_Muthiah]

Danny,

The group policies are applied in a hierarchical fashion beginning at the local computer level then working up to the domain, site, and organizational unit levels.

If a setting within a higher level policy contradicts a setting made in a lower level policy, then the higher level policy takes precedence.

example, suppose that a local computer level policy set the minimum password length to six characters and a domain level policy set the minimum password length to eight characters. Assuming that both policies were in effect, the required password length would be eight characters because the domain level policy is considered to be a higher level policy than the local policy.

Archunan

[Arch_Muthiah]

Danny,

This url explains about the order of events processing from startup to log on.

http://technet2.microsoft.com/WindowsServer/en/Library/5e45bb2f-49dc-4a5a-86bb-46b3fdb8db561033.mspx


Archunan

[Danny Lai]

Hi Everyone,

Thanks for the help and advise. I understood now.

br

danny