Re: What's happening ? Group Policy problem

Thanks for respond, very appreciated. Here's more explication:

When I was applying some Computer group policy in my domain (domain
controler), it is affecting my entire computer even if I am not logging on to
my domain (with my client machine).

I was wondering if it was normal that my domain can change policy that
change the behaviour of my workstation even if it is disconnected from the
domain. (Conncted to a workgroup by example).

thanks

"Herb Martin" wrote:


"abuck" <abuck@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B1424091-78BF-410E-9E62-32FE6BB0730B@xxxxxxxxxxxxxxxx
Ok, i'm pretty new to active directory but I'm doing some test and found
something that is very strange.

I have a client machine (windows XP) as well as a windows 2003 server
(Domain controller) and I have added my client machine in the domain. I
have
added a group policy in the domain controller which has the authenticated
user has the security filtering.

Let's say that I define the change system clock policy in computer
configuration, windows settings, security settings, local policies, user
rights to be no one.

It is doing the good behaviour when i'm logging to my domain in my client
machine (I can't change the system clock) but the problem is even if i'm
connecting LOCALY to my client machine, i STILL can't change my system
clock.

What do you mean? With a LOCAL account defined on the client
computer?

(Domain) Group Policies have no control over non-Domain users --
except by controlling the machine itself.

User policies affect domain users -- Computer Policies affect domain
computers.

BUT the domain policy still affects that domain machine as a computer
which MAY restrict what a user can do.

It's seems that the domain group policy override my client pc when i'm
logging localy.

How come ? How can we explain that ? any info on that is very much
appreciated.

--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)



.

Relevant Pages

  • Re: Help with GPO problem! PLEASE!!
    ... Policy Man Console or not. ... select Group Policy, select new and choose a name for your new Group Policy. ... select create an link a GPO here. ... >>> Controller Security Policy or the GPO. ...
    (microsoft.public.windows.group_policy)
  • Re: login problem
    ... On Mar 8, 2:08 pm, group policy ... that I have create a user and join a client machine in domain, ... policy does not allow to login interactively". ... "deny log on locally" policy of the client PC. ...
    (microsoft.public.windows.server.general)
  • RE: GPO Bypass traverse checking user right
    ... But the client Machine doesn't have Domain policy. ... So if you want to check for Default Group Policy for Domain. ... "rob davis" wrote: ...
    (microsoft.public.windowsxp.configuration_manage)
  • Group Policy process
    ... can someone point me to a link or explain exactly how group policy is applied on a client machine. ... what I want to know is are policy settings applied every time the policy synchronizes or just new policy changes. ... The reason I am asking is I am having a strange issue when logging on to machines and am suspecting a problem with the group policy applying as the machines sits at applying computer settings for ages ...
    (microsoft.public.windows.group_policy)
  • Re: which group policy to apply
    ... >Group Policy for Domain Controller ... >apply GPO ... >> I have a default domain policy in my group policy at the ...
    (microsoft.public.windows.group_policy)