Group Policy Administration & Security Settings Flashcards

In what order are Group Policy Objects (GPOs) applied in Active Directory?

Answer: Local, Site, Domain, OU

GPOs are applied in LSDOU order: Local, Site, Domain, then Organizational Unit, with later policies able to override earlier ones.

What does the 'Block Inheritance' option on an OU do?

Answer: Prevents GPOs from a parent container from applying to the OU

Block Inheritance stops GPOs linked at parent containers (domain or higher-level OUs) from flowing down to the OU where it is set.

Which GPO setting overrides 'Block Inheritance' to force a policy to apply regardless?

Answer: No Override (Enforced)

Setting a GPO link to 'Enforced' (formerly No Override) prevents Block Inheritance from stopping that GPO from applying.

Which Group Policy section contains settings like Account Lockout Policy and Password Policy?

Answer: Computer Configuration → Windows Settings → Security Settings → Account Policies

Account Policies including Password Policy and Account Lockout Policy are found under Computer Configuration → Windows Settings → Security Settings → Account Policies.

What is the purpose of the Resultant Set of Policy (RSoP) tool in Windows Server 2008?

Answer: To simulate or view the effective Group Policy settings applied to a user or computer

RSoP reports the net result of all GPOs applied to a specific user or computer, helping administrators troubleshoot policy conflicts.

Which command-line tool forces an immediate Group Policy refresh on a Windows Server 2008 machine?

Answer: gpupdate /force

Running 'gpupdate /force' immediately reapplies all Group Policy settings, reprocessing even those that have not changed.