Group Policy basics

[araczek]

Simple question. When domain policy is applied if I go to the local machine and do gpupdate /force should I see the DOMAIN policy setting or the LOCAL machine setting?

One thing coming up is a security scan shows that a machine may have a certain setting as "incorrect" but Group Policy is showing the setting is correct. I know all about linking to the proper OU, RSoP, etc. RSoP shows the correct setting also.

...Masked User

[Mike.Stephens]

You should see a combination of both Domain and Local group policy applied to the user and computer. Local Group Policy (and MLGPO for Vista) is applied to the computer/user first. Then, domain GPOs are applied. Any policy setting where a domain GPO conflicts with the Local GPO, the domain GPO should prevail.