SK0-004 · Question #825
A server administrator recently applied a local policy to a computer with gpedit.msc. However, the policy keeps reverting back to its original setting the next day. The server administrator is…
The correct answer is B. A group policy is overriding the local policies on the next group policy refresh. Domain Group Policy Objects (GPOs) take precedence over local policies and are reapplied on a refresh cycle, causing any local policy change to be overwritten by the domain-level setting.
Question
A server administrator recently applied a local policy to a computer with gpedit.msc. However, the policy keeps reverting back to its original setting the next day. The server administrator is unaware of what is causing this issue. Which of the following BEST describes what is occurring?
Options
- AA startup script is running at boot that is reverting the registry key
- BA group policy is overriding the local policies on the next group policy refresh
- CThe antivirus program installed on the system is blocking access to the Program Files directory
- DAnother administrator is playing a prank by logging in to the machine and reverting the change
How the community answered
(27 responses)- A11% (3)
- B78% (21)
- C4% (1)
- D7% (2)
Why each option
Domain Group Policy Objects (GPOs) take precedence over local policies and are reapplied on a refresh cycle, causing any local policy change to be overwritten by the domain-level setting.
A startup script could modify registry keys at boot, but this would not produce a daily revert tied to the group policy refresh interval and is a less common cause in domain environments.
Active Directory Group Policy is processed in LSDOU order (Local, Site, Domain, OU), with each higher layer overriding the one before it. Domain GPOs refresh automatically every 90 minutes (plus a random offset) on member workstations, so any local policy configured with gpedit.msc that conflicts with a domain GPO will be overwritten on the next refresh cycle.
Antivirus software may restrict access to certain directories but does not manage or revert Group Policy settings or registry keys related to policy application.
While theoretically possible, another administrator reverting a change is not a systematic technical explanation and does not align with the described pattern of automatic daily reversion.
Concept tested: Group Policy precedence overriding local policy settings
Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/group-policy/group-policy-overview
Topics
Community Discussion
No community discussion yet for this question.