How to change policy settings in a domain GPO

If one wants to change some of the policy settings in the domain group policy object (GPO), one should not change...

the default domain GPO, but rather generate a new domain GPO and position it above the default domain GPO on the Policy Properties page via up/down.

Does the new domain GPO assume all the settings of the default GPO as a base, plus any GPO changes that one would apply?

It all depends on how you start your new GPO. If you create a new GPO, then all the settings are neutral (i.e., undefined). If you import a template from an existing GPO or security profile, then the GPO will start out with the settings from that loaded template. It is always a good idea to define a separate GPO rather than editing your default domain GPO. But to give the new GPO priority, it should be last in the list not first. The GPO applied last takes precedent over all previously applied GPOs.

This was first published in October 2002

Dig Deeper



Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.



Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:









  • Virtual desktop security guide

    To secure virtual desktops, consider antivirus, certificates and network vulnerabilities. Just remember, VDI doesn't always ...

  • Guide to low-cost desktop virtualization

    In this guide, learn to virtualize desktops without spending more than you would when deploying PCs, and what VDI vendors are ...

  • VDI pilot project guide

    A VDI pilot project should start with a VDI project plan. Know what pitfalls to avoid and test product options to achieve a ...