How to Modify Group Policy Processing

We can modify the default processing of GPOs by using:

1. Security filtering. You can use security filtering to specify specific users, computers, or groups that are able or not able to process a GPO. For example, you could specify that members of the Technical Support group have special security settings.
2. Enforcement. You can use enforcement to ensure that settings in a specific GPO apply regardless of any lower-level GPOs that would normally override this GPO. For example, you could specify standardized security settings at the domain level.
3. Block inheritance. You can use block inheritance to prevent settings from a higher-level OU from being inherited by a lower-level OU. For example, settings applied at the domain level could be blocked from impacting users in the IT OU.