Ask the Expert

Are group policies cumulative?

Are group policies cumulative? - If a GP is assigned to the domain and then a separate GP is assigned to an OU, do features of the domain GP filter down to the OU and apply with features set in the OU GP as long as they don't conflict? I thought that if a GP was assigned to an OU its features would overwrite any features set by a GP assigned to a level above.

Requires Free Membership to View

If you have no GPOs that "conflict" anywhere in your SOM (scope of management), they will apply cumulatively. However, if you have a GPO which says to do one specific thing at, say, the Domain level and another GPO which ways to do a specific thing at, say the OU level, the one "closer" to the user (or computer) will apply. So, here's a simple example: At the domain level, imagine that you restrict the control panel, but at the OU level, you make it available. Since the GPO linked to the OU is "closer" to the target account, that "affect" will take effect.

This was first published in April 2004

There are Comments. Add yours.

TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: