Examining GPO Links and Default GPOs

Before you can move on to more advanced Group Policy topics, you must understand two fundamental concepts: GPO links and default GPOs. GPO links affect the way policy is applied. Default GPOs are special-purpose policy objects that Active Directory depends on to establish baseline security settings for domain controllers and domains.

Understanding GPO Links

As you know, the two types of Group Policy are Local Group Policy and Active Directory–based Group Policy. Local Group Policy applies to a local machine only, and there is only one Local GPO (LGPO) per local machine. Active Directory–based Group Policy, on the other hand, can be implemented at the site, domain, and OU levels, and each site, domain, or OU can ...

Get Microsoft® Windows® Group Policy Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.