1

when do local GPOs apply if a computer is a part of a domain? What would be an example scenario when local GPOs would be relevant for a computer that is a part of a domain? Can I somehow 'use' local GPOs even if the computer is a part of the domain?

I ask because I want to understand the difference between local GPOs and domain GPOs and how they differ / how they are interrelated.

Regards.

colemik
  • 749
  • 1
  • 12
  • 24

1 Answers1

6

Local policies apply first; this means that their settings apply to the system, but are overridden by a setting from a linked domain GPO at any level.

Essentially, it's the lowest precedence location in which policies can be applied. You can set whatever you want, as long as no domain policy sets the same thing.

Take a gander here for lots more information on GPO processing order.

Shane Madden
  • 112,982
  • 12
  • 174
  • 248