Re: Local GPO
From: Terence (anonymous_at_discussions.microsoft.com)
Date: 03/01/04
- Next message: Ian: "Hiding Printers on the Start menu"
- Previous message: Chriss3: "Re: System Policy in A/D"
- In reply to: Roger Abell [MVP]: "Re: Local GPO"
- Next in thread: Roger Abell [MVP]: "Re: Local GPO"
- Reply: Roger Abell [MVP]: "Re: Local GPO"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 1 Mar 2004 00:16:05 -0800
Thanks for all your help.
I'm doing studies on Windows 2003 Group Policy, and would like to know how to find out the RSOP for a server from Group Policies.
Let me clarify/conclude my understanding here:
1. All Windows 2003 Servers have Local GPO. But Local GPO for Domain Controllers applies to restore mode only.
2. The Local Security Settings shows the current settings, not the Local GPO.
But how can we get the actual Local GPO? "gpedit.msc" can do ? How about "secedit /export /cfg" ?
One more strange thing is that if the Local Security Setting show the current settings, why the RSOP of GPMC shows no settings applied but Local Secuity Setting does ?
----- Roger Abell [MVP] wrote: -----
Just a point of clarification. On domain controllers it appears
as if there is no local policy. In fact there is, but it only applies
to the restore mode.
"Chriss3" <noSpamHere@chrisse.se> wrote in message
news:ug125Dx$DHA.552@TK2MSFTNGP11.phx.gbl...
> inline
>> --
> Regards
> Christoffer Andersson
>> No email replies please - reply in the newsgroup
>> "Terence" <terencewong@hotmail.com> skrev i meddelandet
> news:544AC59B-B737-42DB-BD79-1131B162BDDD@microsoft.com...
>> Forgive me if it is a stupid question.
>>>> Facts:
>>>> Microsoft's documentation "Windows Server 2003 Group Policy
> Infrastructure" says that "Local GPO: Each computer has exactly one GPO
that
> is stored locally, shared by all users of that computer. This processes
for
> both computer and user Group Policy processing".
>>>> Questions:
>> 1. Do all kind of servers have Local GPO, i.e. Domain Controller,
Member
> Server, Standalone Server. It seems that after promoting to Domain
> Controller, the Local Security Settings MMC snap-in is no longer exist.
Is
> this means that the Local GPO has been removed, or we can't change the
Local
> GPO anymore ?
>> [Chtistoffer] Yes every Windows2000 , Windows XP and Windows Server 2003
> computer have a Local Group Policy, inluced Domain Controllers. You supose
> to use the Default Domain Controllers Policy linked to the Domain
> Controllers OU for define policy settings for Domain Controllers within a
> Domain. How ever you can type gpedit.msc to configure an invidual policy
for
> the particular Domain Controller. but i don't recommend you to do so.
>>> 2. By using GPMC to generate RSOP for a Member Server, the report
> indicates that Local GPO has been denied due to "Empty". But by looking
at
> the Local Security Setting, where are plenty of configurated settings.
> What's going on ?
>> [Christoffer] Whitout know anything about other policys within your
> enveirorment. The Local Group Policy may are overwtitten by a higher-level
> linked Policy within Active Directory.
>>>>> Any hints are appreciated. Thanks.
>>>>>> Terence
>>
- Next message: Ian: "Hiding Printers on the Start menu"
- Previous message: Chriss3: "Re: System Policy in A/D"
- In reply to: Roger Abell [MVP]: "Re: Local GPO"
- Next in thread: Roger Abell [MVP]: "Re: Local GPO"
- Reply: Roger Abell [MVP]: "Re: Local GPO"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
