Group Policy Objects

A collection of policy settings is called a Group Policy object (GPO). A GPO contains policies that affect computers and policies that affect users. Computer-related policies include computer security settings, application settings, and computer startup and shutdown scripts. User-related policies define application settings, folder redirection, assigned and published applications, user logon and logoff scripts, and user security settings. In cases of conflicting policies, the convention is that computer-related settings override user-related settings.

In a GPO, most settings have three possible states: enabled, disabled, and not configured. Group policies are inherited and cumulative. When you associate a GPO with an Active ...

Get Windows® Small Business Server 2008 Administrator’s Companion now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.