Charles and I are saying the same thing, just differently. When you say this: "(only certain group members get these settings)" I am assuming you mean you have security group filtering on these 3 GPO's. If that is not correct then my answer below is incorrect. However I don't see how you can do this without GPO Security group filtering unless you use different OU's.
Are the members of 2, 3 and 4 also members of 'All WSUS Members' in item 1? If yes, they will all end up getting 1. 2, 3 and 4 will be over written as item 1 has the highest precedent. Here is my answer, assuming 2, 3 and 4 have unique membership on the security group filtering. So members of 2 are NOT members of 3 and 4. And members of 3 are not members of 2 and 4...and so on. 1. Install-at-9AM (only certain group members get these settings) 2. Install-at-10AM (only certain group members get these settings) 3. Install-at-11AM (only certain group members get these settings) 4. All WSUS Members, notify only, no download (so they all get this setting, except for the ones who got the setting from above it) It will process like this: Everyone will get number 4 first. Then those that are members of the security group you are using in 3 will get 3. Then members of security group 2 will get 2. And last members of 1 will get 1. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Michael Leone Sent: Monday, June 19, 2017 11:36 AM To: [email protected] Subject: Re: [NTSysADM] Q about GPO Security Filtering precendence On Mon, Jun 19, 2017 at 11:21 AM, Kennedy, Jim <[email protected]> wrote: > When there are multiple linked at the same OU the number next to the > GPO is their precedence. The lowest number link will have the highest > precedence. > > > > “If you have more than one GPO linked to an OU then the processing > order of these GPOs is determined by what is known as the link order. > The GPO with the lowest link order will be processed last – in other > words the GPO with a link order of 1 has the highest precedence, followed by > link order 2, etc.” > > > > https://emeneye.wordpress.com/2016/02/16/group-policy-order-of-precede > nce-faq/ So wait - you are saying I need this order: 1. All WSUS Members, notify only, no download (so they all get this setting, except for the ones who got the setting from above it) 2. Install-at-9AM (only certain group members get these settings) 3. Install-at-10AM (only certain group members get these settings) 4. Install-at-11AM (only certain group members get these settings) This seems to be the opposite of what Charles is saying ...
