DRAG DROP
Your network contains a single Active Directory domain named contoso.com. The domain contains
an Active Directory site named Site1 and an organizational unit (OU) named OU1.
The domain contains a client computer named Client1 that is located in OU1 and Site1.
You create five Group Policy objects (GPO). The GPOs are configured as shown in the following table.
You need to identify in which order the GPOs will be applied to Client1.
In which order should you arrange the listed GPOs?
To answer, move all GPOs from the list of GPOs to the answer area and arrange them in the correct
order.
Answer: See the explanation
Explanation:
<map><m
x1=”6″ x2=”76″
y1=”53″ y2=”72″
ss=”0″ a=”0″ /><m
x1=”5″ x2=”76″
y1=”88
y2=”110″ ss=”0″ a=”0″ /><m x1=”5″ x2=”75″ y1=”120″ y2=”145″ ss=”0″ a=”0″ /><m x1=”6″ x2=”75″
y1=”151″ y2=”179″ ss=”0″ a=”0″ /><m x1=”7″ x2=”76″ y1=”192″ y2=”209″ ss=”0″ a=”0″ /><m
x1=”92″ x2=”183″ y1=”46″ y2=”71″ ss=”1″ a=”0″ /><m x1=”92″ x2=”183″ y1=”77″ y2=”101″ ss=”1″
a=”0″ /><m x1=”93″ x2=”183″ y1=”105″ y2=”127″ ss=”1″ a=”0″ /><m x1=”93″ x2=”185″ y1=”132″y2=”154″ ss=”1″ a=”0″ /><m x1=”94″ x2=”183″ y1=”156″ y2=”183″ ss=”1″ a=”0″ /><c start=”0″
stop=”0″ /><c start=”3″ stop=”1″ /><c start=”1″ stop=”2″ /><c start=”4″ stop=”3″ /><c start=”2″
stop=”4″ /></map>
GPO3 (linked to site)
GPO1 (linked to domain)
GPO4 (linked to domain – enforced)
GPO2 (linked to OU)
GPO5 (linked to OU – enforced)
3 -> 1 ->4-> 5->2
gpo2 is enforced, not 4
1
0
3, 1, 2, 4, 5
Site
Domain Disabled
Domain Enabled
OU Disabled
OU Enabled
0
0
According to the V4 version and the comments there it should be 3,1,4,5,2
1. All “non-enforced gpo’s” are applied in normal order – Local, site, domain and ou
2. Alle “enforced gpo’s” are applied in reversed order – ou, domain. site
credits to the people here:
http://www.aiotestking.com/microsoft/which-order-should-you-arrange-the-listed-gpos-3/
1
0
GPO3 Site
GPO1 Domain
GPO4 OU
GPO5 OU (Enforced)
GPO2 Domain (Enforced)
http://blogs.technet.com/b/musings_of_a_technical_tam/archive/2012/02/15/understanding-the-structure-of-a-group-policy-object-part-2.aspx
1. GPOs without enforcement set are applied first, using the normal precedence rules
2. GPOs with enforcement set are applied last, with their precedence rules reversed
1
0
Yep. 3, 1, 4, 5, 2
0
0
correct answer 3, 1, 4, 5, 2 verified on my lab
0
0
Thanks for verifying. Trust, but verify.
0
0
3,1,4,5,2
when the GOPs enfoced the oder Change: Enforced child OU Policy then Enforced child OU Polic then Enforced Domain Policy so the Enforced Domain Policy ist takes piorty of all
0
0
and if GOP applied to site and enforced will overright the lower Policy in the Domain
0
0