Can I just replace a computer(win10) with a new computer(win11) in domain?

Question

Can I just replace a computer(win10) with a new computer(win11) in domain?

Jin, Peidong 20

what's the impact if I replace a computer(win10) with a new computer(win11) in domain?

Can the GPO still work on a windows 11 computer?

0 comments

1 answer

Your answer

Answer 1

Jason Nguyen Tran 24,545 Independent Advisor

Hi Jin, Peidong,

From a domain perspective, the new Windows 11 device can join the same Active Directory domain just like Windows 10. You’ll want to make sure the old computer account is either reused or cleaned up to avoid duplicate entries in AD.

Group Policy Objects (GPOs) continue to work on Windows 11 devices, since the Group Policy engine is still present. Most policies applied to Windows 10 will carry over, though you may encounter some differences if you’re using settings that are deprecated or replaced by newer Windows 11 features. It’s a good idea to review your GPOs against the latest Windows 11 ADMX templates to ensure compatibility.

The main impact is that certain policies or scripts may behave differently due to changes in Windows 11’s security model or modern management features. For example, some legacy logon scripts or older settings may not be as effective, and Microsoft recommends moving toward modern management with Intune where possible.

If you find this answer helpful, kindly hit “accept answer”.

Jason.

Jin, Peidong 20 Reputation points

2026-06-29T03:10:41.0733333+00:00

Hi Jason

Thanks for your answer.

In this scenario, can I verify whether Group Policy has been applied successfully via commands “gpresult /r” on endpoints?

BR
Jason Nguyen Tran 24,545 Reputation points Independent Advisor

2026-06-29T03:23:06.8666667+00:00

Yes, you can absolutely use the gpresult /r command on Windows endpoints to verify whether Group Policy has been applied successfully. Running this command from an elevated Command Prompt will generate a report showing which GPOs are applied to the computer and the logged-on user. It’s a quick way to confirm that your policies are being enforced as expected.

If you want a more detailed view, you can run gpresult /h report.html to generate a full HTML report that includes processing times and applied settings. This is especially useful when troubleshooting policies that may not be applying correctly. Additionally, the Event Viewer > Applications and Services Logs > Microsoft > Windows > GroupPolicy > Operational log provides granular details about GPO processing, including any errors or delays.

Best practice is to use both gpresult and the Group Policy Operational log together, gpresult tells you what applied, while the log tells you how it was processed. This combination makes it easier to spot issues like conflicting policies or scripts that are slowing down sign-in.

I hope the response provided some helpful insight. If you find this answer useful, please hit “accept answer” so I know it addressed your concern.

Jason.