Hi
Chris,
if you
use the gpresult you can see in which order the policies will be
applied.
Basically the policies which will use security groups for filtering will
apply in the same way than policies which are applied to OUs. This means it
depends where you linked the policies to.
Example:
You
have applied a policy (PolA) on the root and use filtering for GroupA which is
located in Users OU.
You
also have a policy (PolB) in sales OU which is created directly under the root
and filtered by GroupB.
UserX
is Member of both groups.
This
means PolA will be applied first and then PolB will be applied to the
userX.
If the two policies linked to different OUs on same
hierarchical level in AD structure you have to check the order by using
gpresult. But by the way, if this is the case, I would recommend to check the AD
structure. Most of my customers have central OUs where they manage their
groups.
regards
Volker
-----Original Message-----
From: Chris Flesher [mailto:[EMAIL PROTECTED]
Sent: Monday, July 21, 2003 6:49 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Group Policy questionGuido, that's not quite what I had in mind. Two OU's that are not hierarchical to each other. It could be a flat OU architecture. Two seperate OU's that have gpo's applied to a group. If a user is a member of both groups, which gpo will take precedence? Maybe it's a dumb question but it was posed to me by a higher up and I can't find anything about this scenario in technet.Chris FlesherThe University of ChicagoNSIT/DCS1-773-834-8477-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GRILLENMEIER,GUIDO (HP-Germany,ex1)
Sent: Monday, July 21, 2003 10:43 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Group Policy questionI guess you're using the groups to filter for whom a GPO is applied - but you're not applying a GPO to a group ;-) It doesn't matter which OU the group resides in, it simply matters, which OU the respective GPO is applied to.Assuming you're talking about applying two GPOs to the same OU - each with a separate Group used for filtering, then you can set the priority of the GPO processing order directly on the OU on the Group Policy tab./Guido
From: Chris Flesher [mailto:[EMAIL PROTECTED]
Sent: Montag, 21. Juli 2003 17:18
To: [EMAIL PROTECTED]Scenario: a user is a member of two groups. Each group is in a seperate OU. A gpo is applied to each group. Which gpo will take precedence for that user? In other words, which will be the last to be applied and get the settings applied to that user?Chris FlesherThe University of ChicagoNSIT/DCS1-773-834-8477
