Active Directory simple question

[blackzone]

GPO apply inheritence from 1)local computer, 2)site, 3)domain, 4)OU.

My question is what exactly is a site and OU, and where can you apply the GPO.

----------------------------------------------------

(1) local computer is just your computer and you apply GPO from LGPO.

(3) Domain is just your domain (e.g. example.com) and you apply it from GPO of the domain controller?

how about OU and site

[luke.mccormick]

start, run, type mmc and hit enter

file, add/remove snapin

click add

group policy object editor

browse

create new gpo or select one you already have

click ok

click finish

click close

click ok

edit GPO

in AD U and C

right click domain or OU you want to assign the GPO to

properties

select group policy tab

click add

browse to GPO

click ok

click apply and ok

wait for GPO update or run the "gpupdate /force" command

[allen2]

You can also apply gpo to OU: in users and computers mmc, right click on the OU properties, and do the same things already described by luke.mccormick.

For site i don't thing it's possible but never tried it, but you could create an OU for each site.