Group Policy Objects

Levels

• Local computer (only applies to that computer, any policies at any
  other level will override this. This level is not usually used).

Policies filter down these levels (conflicts go to the lowest level,
i.e. the last one applied)

• Site Level

  • Domain Level

    • OU Level

BLOCK INHERITANCE: Prevents higher-level policies from being applied
(except password policy).

ENFORCED: Forces policies to be applied to lower levels (overrides BLOCK
INHERITANCE and conflicts).

Only one GPO can have a password policy applied at a time and it must
be at the domain level.