Re: Local setting vs. Effective setting w/ GP??

From: ptwilliams (ptw2001_at_hotmail.com)
Date: 02/12/05 

Date: Sat, 12 Feb 2005 09:50:59 -0000

Local policy, and any other level of GPO policy in *this* specific case,
only affects computers. The domain policy is different -you're logging onto
the domain not your local PC, hence where it can only be set.

What does this mean? Basically, for domain passwords set the policy at the
domain level. Set it anywhere else and it will only apply to the local
machines, that is, local logons on to member servers or domain computers.

Hopefully this can explain things a bit:
 -- http://www.msresource.net/content/view/36/46/ 

-- 
Paul Williams
http://www.msresource.net/
http://forums.msresource.net/
"WetBehindEars" <WetBehindEars@discussions.microsoft.com> wrote in message 
news:FB91636A-B444-4E65-96B8-5CDAAE8FB6FD@microsoft.com...
I understand that, but shouldnt the domain policy override the local?
"Matjaz Ladava [MVP]" wrote:
> local policy affects local account meanwhile domain policy affects domain
> accounts.
>
> -- 
> Regards
>
> Matjaz Ladava, ladava.com
> MCSA, MCSE, MCT
> Microsoft MVP Windows Server - Directory Services
> e-mail: matjaz@ladava.com, matjazl@mvps.org
>
> "WetBehindEars" <WetBehindEars@discussions.microsoft.com> wrote in message
> news:14545F5B-10F1-425D-9815-4267B91322C8@microsoft.com...
> >I have a Password GP setup at the domain level to test on a few users.  I
> > have it setup for passwords to expire every 8 days (for testing 
> > purposes).
> > Well we get a popup screen that states password will expire in 14 days.
> > How
> > is that, if the domain GP is set to 8 days?  I have taken a look at the
> > local
> > computer policy on my workstation and it states 14 days for the local
> > setting
> > and 14 days for the effective setting (which should be the GP I applied 
> > to
> > the domain).  Now why hasnt the GP at the domain overridden the local
> > policy?
> > I see that other settings have taken effect.  Any suggestions as to why
> > this
> > is happening?  Thanks!
>
>
>

Relevant Pages

  • Re: Reinstall everytime assigned applications through GPO on start
    ... Software installation extension has been called for background policy refresh ... Stations - R&D Software (EMEA computers). ... Stations - R&D Software (EMEA computers) is set for installation because it ... The assignment of application Remote Administrator v2.1 from policy Software ...
    (microsoft.public.windows.group_policy)
  • Re: better way to limit users/group to logon to specific workstati
    ... You can still do it in policy, ... logon locally setting, and apply it to all computers except the ones you ... Workstations" attribute - applying to the user accounts ...
    (microsoft.public.windows.group_policy)
  • Re: EventID 1054 from Userenv for startup script
    ... Did you configure the mentioned policy for the XP computers? ... startup script currently does not have Authenticated Users in its ACL. ... It obviously gets group policy ...
    (microsoft.public.windows.group_policy)
  • Re: Remote Desktop thru VPN and Network Security
    ... You can use Remote Access Policies to configure exactly what users can ... access via their VPN connection. ... If you create a policy you can then edit ... infection if users are copying files back and forth between computers. ...
    (microsoft.public.security)
  • Re: Remote Desktop thru VPN and Network Security
    ... You can use Remote Access Policies to configure exactly what users can ... access via their VPN connection. ... If you create a policy you can then edit ... infection if users are copying files back and forth between computers. ...
    (microsoft.public.windowsxp.security_admin)
Loading