Is it possible to have a restricted groups GPO at the root of an OU structure and another restrictrcited policy further down the OU structure ? I get the feeling that the root GPO will take priority ? reason i am asking is i want to lock down the domain admins group but further down add two groups to the local adminstrators group. But when i test its goes a bit to the left so unsure.
Kind Regards