+ Post New Thread
Results 1 to 11 of 11
Wireless Networks Thread, Linking Group Policys - What order and what options? in Technical; Hi Guys, I know this probably rather simple but I'd just like to make sure I understand it. When linking ...
  1. #1
    Nick_Parker's Avatar
    Join Date
    Jan 2008
    Location
    Dainfern, South Africa
    Posts
    461
    Thank Post
    100
    Thanked 18 Times in 13 Posts
    Rep Power
    17

    Linking Group Policys - What order and what options?

    Hi Guys,

    I know this probably rather simple but I'd just like to make sure I understand it.

    When linking group policies, I have 2 Group Policys:

    1 -> Default Domain Policy
    2 -> Internet Settings Group Policy

    (The numbers are the link order)
    Default domain policy sets the proxy to 192.168.0.40:8080
    Internet Settings Group Policy sets the proxy to 192.168.0.45:8080

    Now, when the policys are applied, what will the clients proxy settings be set to? I would assume it would be set to 192.168.0.40 and then changed to 192.168.0.45 almost straight away as it loads Default GP and then the Internet one directly after?

    Next question, how does the Enforced option affect the GPs?
    If the 1st one is enforced, can the 2nd one override the settings?
    what if the 2nd one is set to enforce? what if they both are?

    Sorry, like I said, probably a simple answer

  2. #2
    altecsole's Avatar
    Join Date
    Jun 2005
    Location
    Whittington, Lancashire
    Posts
    286
    Thank Post
    40
    Thanked 36 Times in 26 Posts
    Rep Power
    26
    Policies will be applied from the bottom up; so you will end up with 192.168.0.40:8080.

    If a policy is enforced policies that apply after it cannot change any of the settings that it applied. If you have two policies, both enforced and both with the same settings, I'd look again at your setup and see if you can change things around.

  3. Thanks to altecsole from:

    Nick_Parker (29th January 2009)

  4. #3
    Nick_Parker's Avatar
    Join Date
    Jan 2008
    Location
    Dainfern, South Africa
    Posts
    461
    Thank Post
    100
    Thanked 18 Times in 13 Posts
    Rep Power
    17
    Thanks so much altecsole

  5. #4
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,529
    Thank Post
    108
    Thanked 89 Times in 75 Posts
    Blog Entries
    47
    Rep Power
    41
    if you install or use group policy management console , you can run tests that simulate policy application and u get a report telling u what settings have been applied (from where iirc)

  6. #5
    tosh74's Avatar
    Join Date
    Dec 2006
    Location
    Scotland
    Posts
    136
    Thank Post
    27
    Thanked 43 Times in 27 Posts
    Rep Power
    23
    Quote Originally Posted by altecsole View Post
    Policies will be applied from the bottom up; so you will end up with 192.168.0.40:8080.

    If a policy is enforced policies that apply after it cannot change any of the settings that it applied. If you have two policies, both enforced and both with the same settings, I'd look again at your setup and see if you can change things around.
    Wrong way round mate. GPO are applied in the following order
    Local policy
    Site-level policy
    Domain-level policy
    Domain controller policy (if the domain controller is left in the domain controller container)
    Organizational unit policy

  7. #6
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    What I would do is

    Leave the default domain policy where it is and link you internet setting policy to the ous that it must work with. So for example you might want all your xp clients that are in on ou to have a different proxy than the default. Linking the policy will apply the default domain policy and then the internet policy to the computers in that ou. This works as long as you dont enforce a policy lower down.

    Richard

  8. #7

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,157
    Thank Post
    116
    Thanked 529 Times in 452 Posts
    Blog Entries
    2
    Rep Power
    124
    Quote Originally Posted by tosh74 View Post
    Wrong way round mate. GPO are applied in the following order
    Local policy
    Site-level policy
    Domain-level policy
    Domain controller policy (if the domain controller is left in the domain controller container)
    Organizational unit policy
    Yes, but if you have multiple policies linked at the same level (eg 2 linked at the top of the domain; 2 linked to the same OU) then they apply in reverse numerical order (which is *really* stupid!)

    The best thing to do is run the RSoP as pointed out by @browolf - then you can be sure what's going to happen.

  9. #8
    altecsole's Avatar
    Join Date
    Jun 2005
    Location
    Whittington, Lancashire
    Posts
    286
    Thank Post
    40
    Thanked 36 Times in 26 Posts
    Rep Power
    26
    Quote Originally Posted by tosh74 View Post
    Wrong way round mate.
    Sorry mate; the original post mentioned link order; this applies to group policies applied in the same OU. In this case the policies are applied from the bottom up (2 first, then 1).

  10. #9
    altecsole's Avatar
    Join Date
    Jun 2005
    Location
    Whittington, Lancashire
    Posts
    286
    Thank Post
    40
    Thanked 36 Times in 26 Posts
    Rep Power
    26
    Quote Originally Posted by tosh74 View Post
    GPO are applied in the following order
    Local policy
    Site-level policy
    Domain-level policy
    Domain controller policy (if the domain controller is left in the domain controller container)
    Organizational unit policy
    This is wrong. Policies cascade down from Site, Domain, OU, Sub OU etc. When a policy is set at one level, the levels below inherit the settings from the levels above. If a policy settings collide, the last policy applied wins (unless you have Block Inheritance set).

  11. #10

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,866
    Thank Post
    412
    Thanked 777 Times in 650 Posts
    Rep Power
    182
    Quote Originally Posted by altecsole View Post
    If a policy settings collide, the last policy applied wins (unless you have Block Inheritance set).
    Or the policy object is marked Enforced, in which case it wins over policies that would otherwise override it.

  12. Thanks to powdarrmonkey from:

    altecsole (30th January 2009)

  13. #11
    tosh74's Avatar
    Join Date
    Dec 2006
    Location
    Scotland
    Posts
    136
    Thank Post
    27
    Thanked 43 Times in 27 Posts
    Rep Power
    23
    Quote Originally Posted by altecsole View Post
    Sorry mate; the original post mentioned link order; this applies to group policies applied in the same OU. In this case the policies are applied from the bottom up (2 first, then 1).
    aye helps if I READ the OP correctly (missed the link order)

SHARE:
+ Post New Thread

Similar Threads

  1. Linking to Articles
    By FragglePete in forum EduGeek Joomla 1.5 Package
    Replies: 2
    Last Post: 8th October 2008, 07:09 PM
  2. Disable the autocorrect options in group policy
    By Liam in forum How do you do....it?
    Replies: 2
    Last Post: 24th October 2007, 12:49 PM
  3. ICT Usage Policys/Procedures
    By DSapseid in forum General Chat
    Replies: 1
    Last Post: 3rd May 2007, 11:02 AM
  4. Linking two buildings
    By adamyoung in forum Wireless Networks
    Replies: 6
    Last Post: 28th May 2006, 06:41 PM
  5. Pupils puling out rj45 cable to stop scripts and policys
    By MManjra in forum Wireless Networks
    Replies: 13
    Last Post: 6th March 2006, 08:18 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •