Hello, Cloud Gurus, and welcome.
And congratulations on making it to the end of this section.
It's been a pleasure to work through this section with you.
Let's take a moment to review the key Group Policy concepts
and how to deal with tricky Group Policy scenarios
that might pop up on the exam or in the real world.
Let's first review the Group Policy processing order.
In this section, we learned that policies configured
on the local computer are evaluated first,
and then site policies are evaluated,
then domain,
and then finally,
any policies applied to organizational units
are evaluated last.
And any settings that are evaluated later
replace any earlier conflicting settings.
But what can disrupt this Group Policy processing order?
Well, there are quite a few.
The first to be aware of is block inheritance,
and it will block the settings
from Group Policy Objects that were evaluated earlier
in the Group Policy processing order.
Unless there's any enforced GPOs
that are higher in the hierarchy,
they will always apply last
even where block inheritance is configured.
And filtering can also affect this order.
Security filtering based on user or computer groups
is one example of this.
And the other filter that can be used
to affect the processing order
is WMI filters.
The block inheritance setting
is applied to an organizational unit.
The enforced setting is applied to a Group Policy link.
In the filtering options,
including both security filtering
and WMI filters are applied
to the Group Policy object itself.
Now because of all of the flexibility
that comes with Group Policy,
it makes for excellent exam questions.
Let's take a look at a screenshot
of the Group Policy Management Console.
And let's say we want a computer configuration setting
in the linked server software policy shown here
to apply to the servers in that organizational unit.
Let's support some of the reasons
why the setting might not apply.
And you can pause the video here
if you want to have a go at spotting
some of them for yourself
and then hit the play button when you're ready for me
to talk through some of the reasons.
Well, the first and most obvious of the problems to me
is that the computer configuration settings
on this Group Policy Object are disabled.
So any computer configurations in this GPO
would never apply to computers
in the server's organizational unit.
But what else might prevent the settings
from this server software policy from applying?
Well, the link order configured here
means that any conflicting policy settings
in this server baseline policy
would override any of the settings configured
in the server software policy.
And there's another reason, too.
The domain level software policy is enforced
and that means that it will override all other settings
even if OUs had block inheritance configured.
And as you can see,
paying attention to the details
when dealing with tricky Group Policy questions is important
and it will ensure your success not only on the exam,
but also in your role as a hybrid administrator.
Well, that wraps up this summary.
Thanks for being with me in this section.
And I'll look forward to seeing you again
in the next section.