GPO scope
A GPO contains configuration settings that you specify that could apply to computer and user objects. Still, you must define the domain objects you want to be affected by the policies. This is the scope, or, defined another way, the blast radius/area of impact of where the policy settings will be applied.
A GPO can have a scope of the following three domain object levels:
- Site scope: All users and computers within this site will be affected by the linked GPO with a scope set at this level
- Domain scope: All users and computers within this domain will be affected by the linked GPO with a scope set at this level
- OU scope: Only users and computers within this OU will be affected by the linked GPO with a scope set at this level
By default, all users and computers will be affected by the policy linked to the container they are part of; a GPO can be linked to multiple sites, domains, or OU container objects.
Note
GPOs can only apply/affect users and...
