How do I link a GPO to a domain?

To link a GPO to a site, domain, or to an organizational unit, administrators can use the Group Policy Management Console snap-in.

Linking can be applied in two ways: You can link a GPO to a specific site, domain, or OU. For example, if a GPO is linked to a domain, the GPO applies to users and computers in that domain. The main reason for linking a GPO to a specific site, domain, or OU is to keep with the normal rules of inheritance.

Group Policy objects need to be linked to an Active Directory site, domain or OU before they are applied to computers and users. GPOs are applied to the object they are linked to and all its child objects. For instance, a GPO linked to a site will also apply to objects in that site's domains and OUs.

Each GPO is linked to an Active Directory container in which the computer or user belongs. By default, the system processes the GPOs in the following order: local, site, domain, then organizational unit. Therefore, the computer or user receives the policy settings of the last Active Directory container processed.