Windows® Group Policy Administrators Pocket Consultant

Managing Active Directory–Based Group Policy

Active Directory–based Group Policy is available when Active Directory Domain Services (AD DS) is installed. Each site, domain, and organizational unit can have one or more group policies. Group policies listed higher in the Group Policy list have greater precedence than policies listed lower in the list. This ensures that policies are applied appropriately throughout the related sites, domains, and organizational units.

Working with GPOs in Sites, Domains, and OUs

When you want to work with Active Directory–based Group Policy, you’ll find that each domain in your organization has two default GPOs: Default Domain Controllers Policy GPO and Default Domain Policy GPO. The default GPOs are essential to the ...