Lower Level vs. Higher Level: Which way is up?

[mchaffin]

This one's for Jeremy-

On page 6 of your book, you say "By default, when a policy is set at one level, the levels below inherit the settings from the levels above it." I agree with this statement.

However, I think we all know that GPOs are applied in the following order: local machine, site, domain and the OU. This would imply the local machine is at the lowest level and the domain and OU are higher.

Later in the book, you describe the domain or OU as being at a lower level than the site. (See pg. 49 Note Box) If you mean "lower" as in lower to the root of the directory then I understand; but, as you describe on page 6, the lower level inherits from above. This would suggest that the local settings will override any domain level settings.

Which way is up?

I think I'm using "lower" consistently...

That is..

OU is "lower" than domain.

Domain is "lower" than site.

I'm usually saying "farther" and "closer" now...
it's less confusing...

So, "Local" is the "farthest" away ... OU is the "closest"...

Thanks for writing.. sorry it took me months to reply.

I'm busy writing the NEXT BIG THING...