Group Policy Objects

A collection of policy settings is called a Group Policy Object (GPO). A GPO contains both policies that affect computers and policies that affect users. Computer-related policies include security settings, application settings, assigned applications, and computer startup and shutdown scripts. User-related policies define application settings, folder redirection, assigned and published applications, user logon and logoff scripts, and security settings. In cases of conflicting policies, computer-related settings usually override user-related settings.

GPOs are stored at the domain level and are associated with an Active Directory object—a site, domain, or organizational unit (OU). One or more GPOs can apply to a site, domain, ...

Get Windows Server® 2008 Administrator’s Companion now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.