1
00:00:00,640 --> 00:00:00,760
Now,

2
00:00:00,760 --> 00:00:03,120
it's important that you understand the order of

3
00:00:03,120 --> 00:00:05,750
precedence and application with Group Policy.

4
00:00:05,750 --> 00:00:08,940
I'm not doing a full introduction rundown on Group Policy

5
00:00:08,940 --> 00:00:10,960
here; instead, I'm going to punt to my friend,

6
00:00:10,960 --> 00:00:14,600
Darren Mar‑Elia. He has a course that's a few years old, but then again,

7
00:00:14,600 --> 00:00:17,530
Group Policy hasn't changed much in the last 20 years.

8
00:00:17,530 --> 00:00:18,900
So as far as I'm concerned,

9
00:00:18,900 --> 00:00:22,050
Darren's Pluralsight course on Group Policy Fundamentals is

10
00:00:22,050 --> 00:00:25,850
just as valid today in 2022 as it was in 2015.

11
00:00:25,850 --> 00:00:28,860
So check the exercise files, and I'll link to Darren's course.

12
00:00:28,860 --> 00:00:32,370
He will definitely sort you out if you're newer to Group Policy.

13
00:00:32,370 --> 00:00:35,830
But in terms of that layered effect where you can have

14
00:00:35,830 --> 00:00:39,540
multiple GPOs applying to a user and a computer,

15
00:00:39,540 --> 00:00:44,220
this is the order right here, L‑S‑D‑O‑U, or LS‑DOU, as I like to say. In

16
00:00:44,220 --> 00:00:48,720
other words, the workstation or server system first will apply its own

17
00:00:48,720 --> 00:00:52,920
Group Policy settings, and then, in order, if there are Group Policy

18
00:00:52,920 --> 00:00:55,580
objects linked to the Active Directory site,

19
00:00:55,580 --> 00:00:59,220
those settings will be applied, then the domain, and then the

20
00:00:59,220 --> 00:01:03,080
organizational unit. Now in the event of a conflict, a level

21
00:01:03,080 --> 00:01:07,350
closer to the computer or a level closer to the user settings

22
00:01:07,350 --> 00:01:09,230
will be the effective setting.

23
00:01:09,230 --> 00:01:12,900
So if we have a setting here on the local machine that gets overridden,

24
00:01:12,900 --> 00:01:17,480
say, in the domain GPO, the domain GPO setting will be the current one.

25
00:01:17,480 --> 00:01:17,720
Now,

26
00:01:17,720 --> 00:01:21,190
I always say as a systems architect, try to keep your Group

27
00:01:21,190 --> 00:01:23,990
Policy infrastructure as simple as you can get it.

28
00:01:23,990 --> 00:01:24,450
In fact,

29
00:01:24,450 --> 00:01:32,000
I'll end this lesson with some Group Policy‑proven practices that you might find useful in your real life work.