How Group Policy – GPO applies

Since there can be some confusion around this, I thought it would be a good idéa to write some rows.
The thumb rule is that the GPO who starts a conflict wins. I.e. if a sub GPO lower in the hirarcy starts a conflict with Default Domain Policy, the sub GPO wins.
In a domain it’ll look like this:

1. Local Policy (what you find in gpedit.msc)
2. Site GPO (Usally “Default domain policy”)
3. Domain GPO
4. OU GPO
5. Sub OU GPO

So be very careful when you handle with GPOs, it’s powerful stuff!