Registry Settings within the GPO Precedence Order

[cendrars]

Hello,

I have registry setting applied in precedence position 7. There is a need
to register an exception for additional registry settings, and choice has
been made to deliver a single GPO for a single registry setting into
precedence order number 1.

Will the writing of a single registry setting and assigned permissions
within precedence order number 1 impact any registry settings associated with
GPOs linked at lower precedence order? Thank you.

[Mark Heitbrink [MVP]]

Hi

Post by cendrars
Will the writing of a single registry setting and assigned permissions
within precedence order number 1 impact any registry settings associated with
GPOs linked at lower precedence order? Thank you.

does the regsetting exist the other GPOs?

Mark

[cendrars]

Yes. The setting we are referencing would be written higher up in the
precedence order. While the GPO lower in the precedence order has settings
applied for this key. Will the single instance of a registry security
setting within a GPO higher in the precedence order remove security settings
applied to ALL registry keys associated with the lower order GPO.

My preference would be to include all keys in one location, but we know how
that goes. Thanks.

Post by Mark Heitbrink [MVP]
Hi

Post by cendrars
Will the writing of a single registry setting and assigned permissions
within precedence order number 1 impact any registry settings associated with
GPOs linked at lower precedence order? Thank you.

does the regsetting exist the other GPOs?
Mark
--
Mark Heitbrink - MVP Windows Server - Group Policy
Homepage: www.gruppenrichtlinien.de - deutsch
Blog: gpupdate.spaces.live.com - english

[Mark Heitbrink [MVP]]

Hi,

Post by cendrars
Yes. The setting we are referencing would be written higher up in the
precedence order. While the GPO lower in the precedence order has settings
applied for this key. [...]

I´m not quit sure if I get it right, but the rule is: Last Writer Wins ...

The GPO on place 7 comes first, the one at 1 runs (is applied at) last.
So, if GPO1 is effecting exactly the same setting like GPO7, it will
be overwritten.

So if you want to "merge" the both GPOs you need to manually add the
GPO7 settings to the GPO1, to get all applied.

Mark