StudyToCert

All certifications / AZ-802 / Lessons

Microsoft Certified: Windows Server Administrator Associate (exam AZ-802: Administering Windows Server) AZ-802 · Domain 1: Deploy and manage AD DS

Group Policy processing (LSDOU), Enforced and Block Inheritance, security filtering, loopback processing, Central Store, backup and restore

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Group Policy delivers settings to computers and users from Group Policy Objects (GPOs) linked to sites, domains and OUs. Understanding the order in which GPOs apply is the key to predicting results. The order is LSDOU: Local policy first, then Site, then Domain, then OUs from the top of the tree down to the OU that contains the object. Later GPOs overwrite earlier ones when settings conflict, so the GPO linked closest to the object normally wins. When several GPOs link to the same container, the one with link order 1 has the highest precedence and applies last.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study AZ-802 for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the AZ-802 study plan