I am having a problem with Group policies I need to know how the gpo's are applied to a user.
The problem is as follows
I have an win 2000 Active directory.
I have created 2 groups called
I have created a user called
I addedd usrSmith to both groups, gBasic and gAdv.
I next created 3 GPO's called
In LocalSet I set the restricted goups policy to set the group gAdv as a local administrator of the machine that usrSmith logs onto. The security settings apply this GPO to any authenticated user.
This is first in the list of GPO's
in the gpoAdvanceSetI set the IE Homepage URL to
the security settings apply this GPO to the group gAdv
This is second in the GPO list
in the gpoBasicSet I set the IE Homepage URL to
The security settings apply this GPO to the group gBasic
This is third in the GPO list
When usrSmith logs on to the Active directory domain the gpoLocal applies correctly and when I run IE the home page is set as
from the policy gpoAdvanceSet
If I change the order of the gpoAdvancedSet (position 3 in list) and gpoBasicSet (position 2 in list) the home page will always stay as the
url from gpoAdvanceSet
How can I get the gpoBasicSet to apply to the usrSmith even if he is in both user-groups, I thought by changing the poistion of the GPO the one higher in the list would apply first but it does not.
Does anyone know any links that explain how GPO's are applied to user when they log on.
Re: Window Group policy objects
15 years 1 month ago #2470
"Users and Computers are the only types of Active Directory objects that receive policy. Specifically, security groups do not have policy applied to them. Instead, for performance reasons, security groups are used to filter the policy by way of an Apply Group Policy access control entry (ACE), which can be set to Allow or Deny, or left unconfigured."
From the microsoft support site. I think this is what you're looking for.