Group Policy Processing

Group policy is processed in the following order: the local group policy, followed by any group policy assigned to the site, domain, and OU of which the user and computer are members.

Most of the information processed by the client is kept in a series of files and scripts located on the sysvol share of the DC authenticated to. Conversely, much of the executable code necessary to use this information is stored on the client. Examples of this include the Windows Installer Service that is responsible for installing software packages and the client-side extension DLLs that process various portions of the group policy.

Listings 23.223.8 have been abbreviated for clarity. They are from the file \winnt\debug\usermode\userenv.log, ...

Get Special Edition Using Microsoft Active Directory now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.