Policy and Preference application order

[Stuart_C]

If I use GroupPolicy Preferences to create a folder and Group Policy to set the security of said folder in the same GPO in what order are the items applied?

 

For example are Policies applied first so setting the security fails, then the folder is created and at the next GP Refresh/startup the security is set? Or will it create the folder first then apply the security as they are in the same GPO and it will just "know"? Or will the Preferences be applied first then the Policy which has the net same result as the second option but for a differenet reason.

[AngryTechnician]

I'm 99% sure that GPP is executed after the rest of Group Policy. It will therefore take 2 refreshes of Group Policy to get your ACL applied to the folder.

[Stuart_C]

thought that might be the case. it's not biggie, I just needed to know. Cheers.

[chrisbrown]

If it absolutely must happen on first logon, you could always trigger a script running xcacls or Set-Acl or similar...That said, AngryTechnician is probably on the money, two refreshes for definite. Obviously in some instances two refreshes may not be suitable, in which case a script can provide you some element of a guarantee.