Skip to Content
Securing Windows Server 2003
book

Securing Windows Server 2003

by Mike Danseglio
November 2004
Intermediate to advanced
448 pages
13h 56m
English
O'Reilly Media, Inc.
Content preview from Securing Windows Server 2003

How Group Policy Works

Unfortunately, Group Policy isn’t something you can just jump in and start using. Group Policy is heavily integrated with Active Directory and requires a good bit of planning before it can be used effectively. Most of that planning simply involves understanding how Group Policy works.

Because Group Policy works within Active Directory, you have a lot of flexibility in applying Group Policy settings to your users and computers. Active Directory allows you to create any number of different Group Policy Objects, or GPOs, which are a collection of settings. You can link a GPO to an organizational unit (OU), site, or domain within Active Directory. When a computer starts up or a user logs on to the domain, any GPOs that are linked to the domain, site, or OU the computer or user resides in are automatically applied.

Tip

Group Policy applies to both computers and users; however, some settings may apply only to computers or to certain users of a computer. Computer policies are always applied before user policies.

GPOs are applied in a specific order:

  1. Settings from the local policy are applied first, if they’ve been configured.

  2. If a GPO is linked to the computer’s site, it applies next. Because users don’t belong to sites, this is applicable only to computers.

  3. If a GPO is linked to the user’s (or computer’s) domain, it applies next.

  4. Any GPOs linked to the OUs that contain the user’s (or computer’s) account are applied next, in order. For example, suppose a user account is ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Microsoft® Windows® 2000 Security Handbook

Microsoft® Windows® 2000 Security Handbook

Jeff Schmidt

Publisher Resources

ISBN: 0596006853Catalog PageErrata