We have already learned "on paper" that there is a hierarchical system to the way that Group Policy processes through GPO links. As a quick refresher, those tiers are (from first to last):
- Site level
- Domain level
- OU level
- Nested OU level
Since processing starts at the top of that list and finishes at the bottom, this means that for any conflicting settings that exist across the different tiers, the ones closer to the bottom will win. Domain policies beat site policies, OU-linked policies trump domain-linked policies, and so on. Within that hierarchy, I would like to briefly both prove this out so that you can see it with your own eyes, and also shed light on some of the more advanced options within these tiers so that you can prepare to handle conflicts in the future.