Thanks for this. Really useful. One thing maybe you could mention in a future video, is the “enforced” option for a gpo . As this can prevent higher precedence policies from taking effect in there is a conflict. :-)
gr8 video. thnx for the amazing content. sir i have an issue... let's say i create users in a OU called DCC and i link a policy for a common wallpaper the DCC OU, the GPO will be applied for both users and it works perfectly. on the other hand i have created some other users in the User OU in AD and don't create the users directly in an OU called Arc, but i add a group in the arc OU that the members are the users which i've created in Users OU in AD, if i apply a GPO for common wallpaper it won't be applied to the users eventhough i've created a group in that OU. but when i move the users from user OU to Arc OU the policy will be applied for the one i've moved there. is that a necessity to create the Users in the exact OU for OU policies to be applied on them?
Great video. Is there any way to reset a standalone PC (not a domain "registered") GPOs to the "factory" (when Windows was first installed) without going GPO by GPO and setting by setting inside each GPO?
Yes enforced even take percedenced over block inheritance. So just remember it's LSDOUCOUE Local Site Domain OU Child OU Enforced the last GPO applied wins even if in the middle somewhere there is any block inheritance
Great Video! Your pacing was excellent. I was able to follow what you were saying. I feel much more confident with GPs now :)
Great to hear!
Thanks for this. Really useful.
One thing maybe you could mention in a future video, is the “enforced” option for a gpo . As this can prevent higher precedence policies from taking effect in there is a conflict. :-)
Sure.
gr8 video. thnx for the amazing content.
sir i have an issue... let's say i create users in a OU called DCC and i link a policy for a common wallpaper the DCC OU, the GPO will be applied for both users and it works perfectly.
on the other hand i have created some other users in the User OU in AD and don't create the users directly in an OU called Arc, but i add a group in the arc OU that the members are the users which i've created in Users OU in AD, if i apply a GPO for common wallpaper it won't be applied to the users eventhough i've created a group in that OU. but when i move the users from user OU to Arc OU the policy will be applied for the one i've moved there.
is that a necessity to create the Users in the exact OU for OU policies to be applied on them?
Great video.
Is there any way to reset a standalone PC (not a domain "registered") GPOs to the "factory" (when Windows was first installed) without going GPO by GPO and setting by setting inside each GPO?
Reset Group Policy Objects using Command Prompt:
(Note: Open Command Prompt with admin)
1. RD /S /Q "%WinDir%\System32\GroupPolicyUsers"
2. RD /S /Q "%WinDir%\System32\GroupPolicy"
3. gpupdate /force
Restore Local Security Policies to default:
1. secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose
Good explanation sir
Thanks for liking
hi ,
fist of all thank you for your great work!
How about Forced linked GPO, does it break the LSDOU order?
Yes enforced even take percedenced over block inheritance.
So just remember it's LSDOUCOUE
Local
Site
Domain
OU
Child OU
Enforced the last GPO applied wins even if in the middle somewhere there is any block inheritance
thanks