DRAG DROP
Your network contains a single Active Directory domain named contoso.com. The domain contains an Active
Directory site named Site1 and an organizational unit (OU) named OU1.
The domain contains a client computer named Client1that is located in OU1 and Site1.
You create five Group Policy objects (GPO). The GPOs are configured as shown in the following table.
You need to identify in which order the GPOs will be applied to Client1. In which order should you arrange the
listed GPOs?
To answer, move all GPOs from the list of GPOs to the answer area and arrange them in the correct order.
Answer: 3 -> 1 -> 4 -> 5 -> 2
Explanation:
Group Policies get applied in the order of Site- Domain and OU.
I think the correct answer is GPO3, GPO1, GPO2, GPO4 GP05.
You are wrong. The answer is 3,1,4,5,2
Why because 5 and 2 enforce setting is enable this means why are applied last in reversed
GPO is applied order LSDOU = local, site, domain .organisation unit
According to several resources, I’ve found the most common answer to be 1,4,5,2,3.
Group Policy objects are processed according to the following order:
1. The local Group Policy object (LPGO) is applied.
2. GPOs linked to sites.
3. GPOs linked to domains
4. GPOs linked to organizational units. In the case of nested organizational units, GPOs associated with parent organizational units are processed prior to GPOs associated with child organizational units.
Enforcing a GPO link
You can specify that the settings in a GPO link should take precedence over the settings of any child object by setting that link to Enforced. GPO-links that are enforced cannot be blocked from the parent container. Without enforcement from above, the settings of the GPO links at the higher level (parent) are overwritten by settings in GPOs linked to child organizational units, if the GPOs contain conflicting settings. With enforcement, the parent GPO link always has precedence. By default, GPO links are not enforced. In tools prior to GPMC, “enforced” was known as “No override.”
That takes us to the answer of Chris 3-1-4 and then the enforced in reverse order 5-2 so that the highest level policy overwrites everything of the lower levels.
3-1-4 ok, but 2-5 in final, because the OU win to domain in case of conflict.
The correct seems to be 3-1-4, but then 5-2 for the enforced policies.
If there are multiple enforced policies, the higher in the OU tree wins.
Just try to set Default Domain Policy and Default Domain Controller Policy to enforced, and then check the Group Policy Inheritence tab of the Domain Controllers.
You will see that the order gets turned around. That is, for the enforced policies, the precedence order is the oposite of the non enforced ones (the higher in the tree is “stronger”, and gets applied later to overwrite “weaker” settings).
Chris and Attila are correct for the reasons they explained.
Order = LSDO (Then the enforced policies, in reverse order) = 31452
31452
First: Disabled (From Top to Down)
Sec.: Enabled (From Down to Top)
I’m sure that correct is 3-1-4-5-2
processing order goes like this: local, site, domain, OU’s and then enforced Group Polices in the order of OU’s, domain and then site. In other words, the enforced Group Polices are moved to the end and applied in the reverse order that they would normally be applied in.
http://www.itfreetraining.com/70-640/gp-enforce-block/