Summary

Within Group Policy, there is a logical and physical representation of every Group Policy object (GPO). The logical component of a GPO is a Group Policy container (GPC), which is stored in Active Directory. The physical component is a Group Policy template (GPT), which is stored on the file systems of domain controllers. If you understand this structure and how it is processed, you will be better equipped to troubleshoot advanced Group Policy issues. While LGPOs don’t have a corresponding GPC or GPT, most policy settings are stored on a computer’s local disk. You can manage file-based LGPO settings in a limited way. Primarily, you do this using the copy command and configuring file system permissions.

Get Microsoft® Windows® Group Policy Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.