This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 90%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EP%3C/text%3E%3C/svg%3E)
Hi there,
I have a question regarding GPO in AD hybrid mode (on prem AD & AAD):
Can local domain GPOs apply on my computer if Im not on the local network but outside? Or its impossible with an hybrid mode to receive GPO from the local Active Directory
Thanks for the clarification
You would have to be connected to your domain controller (via VPN for example) in order to receive the GPOs from your AD environment. The fact that your have an AD hybrid would not help here. Alternatively you could look into using Administrative Templates from Microsoft Endpoint Manager as a means to provide policies directly from the cloud.
allright, and one last question , if my computer is in workgroup, in the local network, but joined to Azure AD domain, it stills not possible to receive GPO right ?
Not really. You would have to set up local group policies on each device. The devices ideally need to be domain joined (or Hybrid joined) so you can use a centralised domain group policy and push your GPOs from your domain controllers. Otherwise, you can still use Microsoft Endpoint Manager if they are Azure AD joined but in a workgroup.