Re: Local GPO

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 03/01/04

  • Next message: Steve Schofield: "Apply Group Policy on control.exe in a domain GPO" 
    Date: Mon, 1 Mar 2004 16:40:35 -0700

    Terence,

    I may have only confused you.
    Local Security Policy should the local group policy.
    I was just trying to make some awareness of policy vs preference.

    AFAIK secedit /export is currently broken for XP local policy.

    I am not sure what you are and are not seeing with RSoP, but it sounds
    as if you are seeing that it say there are no AD based GPOs applicable. 

    -- 
Roger
"Terence" <anonymous@discussions.microsoft.com> wrote in message
news:AF2A3809-1DBF-46A1-AD9D-FB3CFFCADD36@microsoft.com...
> Thanks for all your help.
> I'm doing studies on Windows 2003 Group Policy, and would like to know how
to find out the RSOP for a server from Group Policies.
>
> Let me clarify/conclude my understanding here:
> 1. All Windows 2003 Servers have Local GPO. But Local GPO for Domain
Controllers applies to restore mode only.
> 2. The Local Security Settings shows the current settings, not the Local
GPO.
>
> But how can we get the actual Local GPO? "gpedit.msc" can do ?  How about
"secedit /export /cfg" ?
> One more strange thing is that if the Local Security Setting show the
current settings, why the RSOP of GPMC shows no settings applied but Local
Secuity Setting does ?
>
>
>
>
>      ----- Roger Abell [MVP] wrote: -----
>
>      Just a point of clarification.  On domain controllers it appears
>      as if there is no local policy.  In fact there is, but it only
applies
>      to the restore mode.
>
>      "Chriss3" <noSpamHere@chrisse.se> wrote in message
>      news:ug125Dx$DHA.552@TK2MSFTNGP11.phx.gbl...
>      > inline
>      >> -- 
>      > Regards
>      > Christoffer Andersson
>      >> No email replies please - reply in the newsgroup
>      >> "Terence" <terencewong@hotmail.com> skrev i meddelandet
>      > news:544AC59B-B737-42DB-BD79-1131B162BDDD@microsoft.com...
>      >> Forgive me if it is a stupid question.
>      >>>> Facts:
>      >>>> Microsoft's documentation "Windows Server 2003 Group Policy
>      > Infrastructure" says that "Local GPO: Each computer has exactly one
GPO
>      that
>      > is stored locally, shared by all users of that computer. This
processes
>      for
>      > both computer and user Group Policy processing".
>      >>>> Questions:
>      >> 1.  Do all kind of servers have Local GPO, i.e. Domain Controller,
>      Member
>      > Server, Standalone Server.  It seems that after promoting to Domain
>      > Controller, the Local Security Settings MMC snap-in is no longer
exist.
>      Is
>      > this means that the Local GPO has been removed, or we can't change
the
>      Local
>      > GPO anymore ?
>      >> [Chtistoffer] Yes every Windows2000 , Windows XP and Windows
Server 2003
>      > computer have a Local Group Policy, inluced Domain Controllers. You
supose
>      > to use the Default Domain Controllers Policy linked to the Domain
>      > Controllers OU for define policy settings for Domain Controllers
within a
>      > Domain. How ever you can type gpedit.msc to configure an invidual
policy
>      for
>      > the particular Domain Controller. but i don't recommend you to do
so.
>      >>> 2. By using GPMC to generate RSOP for a Member Server, the report
>      > indicates that Local GPO has been denied due to "Empty".  But by
looking
>      at
>      > the Local Security Setting, where are plenty of configurated
settings.
>      > What's going on ?
>      >> [Christoffer] Whitout know anything about other policys within
your
>      > enveirorment. The Local Group Policy may are overwtitten by a
higher-level
>      > linked Policy within Active Directory.
>      >>>>> Any hints are appreciated.  Thanks.
>      >>>>>> Terence
>      >>
  • Next message: Steve Schofield: "Apply Group Policy on control.exe in a domain GPO"

    Relevant Pages

    • Re: Intermittant GPO failure to apply
      ... If you have backup your group policy before, you can restore it from the ... 244474 How to force Kerberos to use TCP instead of UDP in Windows Server ... Microsoft CSS Online Newsgroup Support ...
      (microsoft.public.windows.server.sbs)
    • Re: Set GPO for specific user group
      ... Click on the domain name in Group Policy Management, select the GPO and then click the arrow to the left to move it to the top of the list ... Filtering: Denied ...
      (microsoft.public.windows.server.sbs)
    • RE: Remote Assistance not working
      ... I have tried these settings you recommend with no results. ... I have yet to get the offer remote assistance to work when launched from the ... The Group Policy on the computer of the novice user must be configured ... Start the Microsoft Management Console Group Policy snap-in. ...
      (microsoft.public.windows.server.sbs)
    • Re: Local GPO
      ... I'm doing studies on Windows 2003 Group Policy, and would like to know how to find out the RSOP for a server from Group Policies. ... But Local GPO for Domain Controllers applies to restore mode only. ... The Local Security Settings shows the current settings, ...
      (microsoft.public.windows.group_policy)
    • RE: Group Policy Connundrum - Stick with it, its confusing!!!
      ... Group Policy Connundrum - Stick with it, ... Small Business Server Internet Connection Firewall ... Import the current Content Ratings Settings: ...
      (Security-Basics)