What is the correct logical order of Active Directory GPO application from first to last?

• A. Local policies, Site policies, Domain policies, OU policies
• B. Site policies, Local policies, Domain policies, OU policies
• C. OU policies, Domain policies, Site policies, Local policies
• D. Domain policies, Local policies, OU policies, Site policies

Answer: (B)

GPO processing follows a specific order: Local, then Site, then Domain, then OU. The computer first applies local policies as a baseline, then site-level policies for the site the machine is in, then domain-wide policies, and finally policies linked to the computer’s or user’s organizational unit. Because policies are merged with later ones overriding earlier ones, the OU policies win on conflicts, giving the most specific scope the final say. This is why the sequence Local → Site → Domain → OU is correct. If the order started with Site and then Local, Local’s settings would end up overriding Site’s in conflicts, which isn’t how GPO precedence is designed.