GPO Computer and User setting conflict 問題

所有回覆

• 

  

  0

  登入以投票

  Yap Ka Chun 你好
  
  最後應該是 as you said "Computer Override User"
  
  但係如果COPUTER 同USER 都是SEND 同一個SETTING
  這便會Depends on which rule you apply first. the latest one will override the previous settings.
  
  Please forgive me if my concept is not correct.
  
  Hope this can help.

  ---

  Chi

  2009年6月3日 上午 07:48
• 

  

  0

  登入以投票

  Dear Customer,

   

  By default, the computer configuration has a high priority to user configuration. When there is a conflict between computer configuration and user configuration, the setting in the computer configuration will be applied in result.

   

  Hope this helps.

  
  Sincerely,

   

  Tom Zhang

  ---

  Tom Zhang – MSFT

  • 已標示為解答 Tom Zhang – MSFTModerator 2009年6月10日 上午 05:55

  2009年6月3日 上午 09:59

  版主
• 

  

  0

  登入以投票

  so the following description is not correct?
  
  if there is conflict between the computer and user settings, the user settings will take effect. if ,for instance, a desktop setting is applied for the computer policy and different default desktop is applied for the user policy.
  the one specified in the user policy will take effect, this is because the user settings are more specific, and they allow systems administrators to make changes for individual user, regardless of the computer they're using
  

  • 已標示為解答 Tom Zhang – MSFTModerator 2009年6月10日 上午 05:55
  • 已取消標示為解答 Tom Zhang – MSFTModerator 2009年6月10日 上午 05:55

  2009年6月3日 下午 12:49
• 

  

  0

  登入以投票

  GPO policies in the same GPO object? Don't know then... for different GPO, I think the order of applying is:
  Site -> Domain -> Computer -> User
  
  So GPO bind to user should overrides computer GPO unless you set the loopback processing mode of the computer GPO.

  2009年6月4日 上午 01:10
• 

  

  0

  登入以投票

  yes , is the same GPO object i think.
  the order not local > Site > Domain > OU ?

  2009年6月4日 上午 01:29
• 

  

  0

  登入以投票

  yes , is the same GPO object i think.
  the order not local > Site > Domain > OU ?

  hoho forgot the local.... yes.. local should be the first. For same GPO.... the computer parts should be applied upon computer startup and the user parts should be applied during user logon, so I think user settings should override computer settings... unless the GPO is enabled with loopback processing...
  

  • 已標示為解答 Tom Zhang – MSFTModerator 2009年6月10日 上午 05:55

  2009年6月5日 上午 01:06