I have a situation where I need to modify an enforced group policy object, however due to the sensitive nature I must test my results first to one test user.
In order to do this I plan to create new policy object with the same settings, apply the correct modifications there, and then test it only to a particular test user (you get the idea).
Because the main GPO in question is enforced, I have to somehow make the test GPO win over the main GPO?
Will the test GPO win over the enforced GPO if I put the test GPO above the main GPO, enforce it and with the security filtering apply the test GPO only to the test user?
Best Answer
If it is enforced at the same or higher priority level, yes. Here is the order of execution. The setting applied last wins:
Local > Site > Domain > OU > OU Enforced > Site Enforced > Domain Enforced
The winning enforced settings at the same level are determined by precedence order.