SOLVED

What is first GPO or Regedit?

%3CLINGO-SUB%20id%3D%22lingo-sub-1461965%22%20slang%3D%22en-US%22%3EWhat%20is%20first%20GPO%20or%20Regedit%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1461965%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3EI%20would%20like%20to%20know%20what%20GPO%20policies%20or%20Registry%20entries%20are%20primarily%20for.%3CBR%20%2F%3EIe.%20If%20in%20the%20registry%20the%20I%20turn%20off%20screen%20saver%20and%20in%20the%20local%20or%20domain%20GPO%20is%20on%2C%20will%20the%20GPO%20overwrite%20the%20entry%20in%20the%20Register%20or%20will%20it%20have%20a%20shortage%3F%20Of%20course%2C%20I%20have%20administrator%20rights%20on%20my%20computer%20and%20also%20for%20DC.%20I%20know%20that%20when%20it%20comes%20to%20GPO%2C%20LSD%20OU%20is%20in%20effect.%20But%20what%20does%20GPO%20vs%20Registry%20look%20like%20which%20is%20first%3F%20Or%20am%20I%20missing%20something%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1461989%22%20slang%3D%22en-US%22%3ERe%3A%20What%20is%20first%20GPO%20or%20Regedit%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1461989%22%20slang%3D%22en-US%22%3EThe%20registry%20is%20always%20first%20as%20this%20is%20a%20crucial%20part%20of%20the%20OS%2C%20those%20settings%20are%20loaded%20and%20applied.%3CBR%20%2F%3EIf%20you%20have%20created%20a%20local%20GPO%20this%20usually%20changes%20no%20more%20than%20a%20registry%20setting%20what%20is%20saved%20and%20applied%20during%20startup%20and%2For%20user%20logon.%3CBR%20%2F%3ERegistry%20-%26gt%3B%20Local%20policy%20-%26gt%3B%20GPO%20is%20how%20things%20are%20applied%20and%20processed.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1462041%22%20slang%3D%22en-US%22%3ERe%3A%20What%20is%20first%20GPO%20or%20Regedit%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1462041%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20your%20replay%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F352455%22%20target%3D%22_blank%22%3E%40janvanwaeyenbergh%3C%2FA%3E.%3C%2FP%3E%3CP%3ESo%20if%20I%20got%20in%20Registry%20an%20Local%20Policy%20disabled%20some%20options%20but%20this%20same%20option%20configure%20in%20AD%20Group%20Policy%20as%20enabled%20for%20this%20computer%2Fuser%20it%20will%20overwrite%20Registy%2FLocal%20Policy%20options%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1462789%22%20slang%3D%22en-US%22%3ERe%3A%20What%20is%20first%20GPO%20or%20Regedit%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1462789%22%20slang%3D%22en-US%22%3ECorrect%20%2C%20the%20GPO%20will%20overwrite%20these%20settings%20%2C%20unless%20some%20kind%20of%20hardening%20is%20applied%20to%20prevent%20changes.%3CBR%20%2F%3EAs%20in%20most%20cases%20when%20things%20are%20applied%20following%20a%20flow%20the%20last%20%22change%22%20wins.%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hi,

I would like to know what GPO policies or Registry entries are primarily for.
Ie. If in the registry the I turn off screen saver and in the local or domain GPO is on, will the GPO overwrite the entry in the Register or will it have a shortage? Of course, I have administrator rights on my computer and also for DC. I know that when it comes to GPO, LSD OU is in effect. But what does GPO vs Registry look like which is first? Or am I missing something?

3 Replies
Highlighted
The registry is always first as this is a crucial part of the OS, those settings are loaded and applied.
If you have created a local GPO this usually changes no more than a registry setting what is saved and applied during startup and/or user logon.
Registry -> Local policy -> GPO is how things are applied and processed.
Highlighted

Thank you for your replay @janvanwaeyenbergh.

So if I got in Registry an Local Policy disabled some options but this same option configure in AD Group Policy as enabled for this computer/user it will overwrite Registy/Local Policy options?

 

Best Response confirmed by pieciaq (New Contributor)
Solution
Correct , the GPO will overwrite these settings , unless some kind of hardening is applied to prevent changes.
As in most cases when things are applied following a flow the last "change" wins.