This article is guided on how to change the priority of a Group Policy:
1. If a machine "Station1" is added in the AD Global Security Group (AD Computer Group) that is linked with all 3 Policies (Test1, Test2, Test3), then the applied GP is the one that is above the others. In this case Test 3.
If the Test 2 policy needs to be the main one then all that needs to be done is to drag and drop the Test2 GP above the Test3 and it will become the top one.
2. If a machine is present in two AD Global Security Groups (AD Computer Group 32, AD Computer Group 12 and AD Computer Group), the same rule applies as the above one will have the highest priority.
To change the priority in this case, you can do it in 3 ways.
- Move the wanted policy above the others
- Remove the machine from the other two AD Global Security Groups and only leave it in the needed AD Group.
- Force a specific policy to be applied to a machine by going in Active Clients and search for the machine name. Once displayed in the list, you will also be able to change the policy:
Same can be done with the Group Policies that are linked with AD User Groups.
The “Default” policy is not the one that needs to be used. That is just an example.
NOTE: If you have a machine in 3 Group Policies and one of them is not related to an AD Computer Group, then that specific one will automatically take the configuration of the one above it.
Test3 – is related to an AD Computer Group
Test2 – is not related to an AD Computer Group
Test1 - is related to an AD Computer Group
In this situation, Group Policy Test2 will take the configuration of Group Policy Test3.
NOTE: If you a "USER1" account and it's added in two Group Policies and one of them is not related to an AD User Group, then that specific one will automatically take the configuration of the one that is active and is related to an AD User Group.
Test2 – is not related to an AD User Group
Test1 - is related to an AD User Group
In this situation, Group Policy Test2 will take the configuration of Group Policy Test1.