Special Edition Using Microsoft Active Directory

Group Policy and Security Groups

The term group policy does not mean that the policies are somehow attached to security groups. You cannot assign group policy to security groups. As a member of various security groups, you receive group policy, but the presence or absence of your user object in a particular group does not determine whether you receive group policy. You and your computer receive group policy based on where your user and computer accounts are located in the Active Directory. If you are a member of a site, domain, or OU that has a group policy assigned to it, you receive the effect of the group policy. Where security groups of which you are a member are defined does not affect your receiving group policy. However, you can escape ...