Re: How to enforce domain policy for local user?

Howdie!

moe_swe@xxxxxxxxx wrote:
I have a domain group policy which works fine on a computer for screen
saver lockup time when I logon to the domain. However, when I logon to
the same machine locally (as an administrator or local user), the
screen saver policy is not working at all. Why?

You can't really enforce the domain policy for a local user.

There are 2 options now:

- Configure the settings you wish to have when using a local account ( with gpedit.msc). Like this, all users that do not log in with a domain account will receive those settings (this could cause a massive administrative overhead).
- Prevent users from logging on with a local user account. Let them run with cached credentials (which can be pretty easy using Group Policy and altering the "Log on locally" right. Remember testing before deploying in the live environment!)

cheers,

Florian
--
Nachwuschsadmin aus dem Süddeutschen/Germany.
eMail: Vorname [bei] frickelsoft [Punkt] net.
blog: http://www.frickelsoft.net/blog.
.

Relevant Pages

  • Re: Logon after changing from domain to workgroup - need help
    ... Without the domain controller you will not be able to use this logon. ... Hopefully you have a local user you can use instead. ... Administrator. ...
    (microsoft.public.windowsxp.security_admin)
  • How to enforce domain policy for local user?
    ... I have a domain group policy which works fine on a computer for screen ... saver lockup time when I logon to the domain. ... the same machine locally (as an administrator or local user), ...
    (microsoft.public.win2000.group_policy)
  • user rights
    ... I just built a standalone windows 2000 server that is on ... If I login as Administrator ... If I logon as a local user that ... prompt me for domain/username to logon. ...
    (microsoft.public.win2000.security)
  • Re: user rights
    ... account on the server. ... If I login as Administrator ... If I logon as a local user that ... > prompt me for domain/username to logon. ...
    (microsoft.public.win2000.security)
  • Re: user rights
    ... Are you using the same password for the administrator account on the stand ... If I logon as a local user that ... > prompt me for domain/username to logon. ...
    (microsoft.public.win2000.security)
Loading