6 GPO

Question 0

What is gpotool.exe used for?

Answer 0

Gpotool.exe is used to troubleshoot GPO status, including problems caused by the replication of GPOs that lead to inconsistent versions of a GPC and GPT.

Question 1

Describe the default Group Policy processing behavior, including refresh intervals and CSE application of policy settings.

Answer 1

Every 90 to 120 minutes, the Group Policy Client service determines which GPOs are scoped to the user or computer and downloads any GPOs that have been updated, based on the GPOs’ version numbers. CSEs process the policies in the GPOs according to their policy processing configuration. By default, most CSEs apply policy settings only if a GPO has been updated. Some CSEs also do not apply settings if a slow link is detected.

Question 2

What groups can be used for scoping GPOs?

Answer 2

Global only.

Question 3

What is the order in which GPOs are applied?

Answer 3

Local
Site
Domain
OU
Enforced (in reverse order)