Group policies can be created at multiple levels on a replied in the following order.
Local computer site domain and then organizational unit.
This is one of the most important things to remember about group policy management as it's something
you'll need to know when managing GPO on a day to day basis.
This means that by default EU policy takes precedence.
However the settings that apply are a combination of all levels put together on y settings are applied
that say otherwise.
For example if you have a desktop wallpaper policy applied at the local level desktop wallpaper applied
at the Domain level a map network drives configured at the EU level.
The user would receive both the domain desktop wallpaper and the map.
Network drives because the domain wallpaper policy would override the local wallpaper policy.
In practice local policies are rarely used as it would need to happen to set them manually on all machines.
This is especially true in the case of large companies.
Also there will be security implications in some cases of having local policies on every machine.
A good example being of a local administrator account password was set this way and needed to be changed
quickly on a large number of computers at the same time.
However there are two settings that can change that group policy precedence order.
These are block policy inheritance found no use unenforced found on group policies themselves block
policy and herons can be used to prevent policy settings from GPO on the levels of both from being applied.
For example if you have a department that needs a different desktop wallpaper so the rest of the company.
This will block that setting but it would mean that any other settings that you want to apply would
need to be set manually enforced is used if you want to stop the use of block policy in.
For example if your company has a heads office and multiple satellite offices the head office may wish
to stop anyone from changing certain settings.
For example if they want to control desktop wallpaper essentially if enforced was applied it would mean
that using block policy inheritance a satellite office would have no effect to set either the block
policy inheritance or enforced options simply right click on the GPO or oyu and click on the option
that you wish to use.
Now that we've gone over group policy precedence let's move on to password policies.