Re: Windows XP remember GP when removed from domain

From: Mark Renoden [MSFT] (markreno_at_online.microsoft.com)
Date: 08/24/04 

Date: Wed, 25 Aug 2004 08:30:41 +1000

Hi Roger

Good catch. I didn't see that. Perhaps Kevin could confirm this is the
case?

Kind regards 

-- 
Mark Renoden [MSFT]
Windows Platform Support Team
Email: markreno@online.microsoft.com
Please note you'll need to strip ".online" from my email address to email 
me; I'll post a response back to the group.
This posting is provided "AS IS" with no warranties, and confers no rights.
"Roger Abell" <mvpNOSpam@asu.edu> wrote in message 
news:eIH1e2diEHA.2624@TK2MSFTNGP12.phx.gbl...
> Hi Mark,
>
> Are you sure of your response ?
> As I read the post, where it says,
>> On my XP Box with SP1 if I remove the PC from the domain,
>> these policies remain in force and are locked on the local station.
> the poster is indicating that the policies are still grayed out
> and disallowing local policy management of their values.
> As I understood it, those values that are tattooed have those
> settings persisting, but the local policy should allow them to
> be changed, and the cached true policies from the domain
> should no longer be in force, and be changable.  Certainly the
> engine should no longer be acting as if they are being enforced
> from AD and disabling their adjustment with the local UI .
> TIA,
> -- 
> Roger Abell
> Microsoft MVP (Windows Server System: Security)
> MCSE (W2k3,W2k,Nt4)  MCDBA
> "Mark Renoden [MSFT]" <markreno@online.microsoft.com> wrote in message
> news:ume2PZWiEHA.3548@TK2MSFTNGP09.phx.gbl...
>> Hi Keven
>>
>> I'm actually surprised that the policies are being reset on the Windows
> 2000
>> machines.  What you're seeing on the Windows XP SP1 machines is what I'd
>> expect.
>>
>> Security policy is an actual registry change that needs to be modified
> with
>> a new policy.  Perhaps your Windows 2000 machines actually have settings
> in
>> their local policy which is allowed to take effect once they are moved 
>> off
>> the domain and that is normally overridden by the domain policy?
>>
>> HTH
>> -- 
>> Mark Renoden [MSFT]
>> Windows Platform Support Team
>> Email: markreno@online.microsoft.com
>>
>> Please note you'll need to strip ".online" from my email address to email
>> me; I'll post a response back to the group.
>>
>> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>>
>> "Keven" <darkslyther@no-spam.yahoo.com> wrote in message
>> news:bca301c4895b$ce235db0$a401280a@phx.gbl...
>> > My windows 2003 domain is set to have accounts lockout
>> > after so many attempts, to require at least 8 passwords
>> > etc.  On Windows 2000 machines if I remove a machine from
>> > the domain it always releases these policies back to the
>> > local GPO.  On my XP Box with SP1 if I remove the PC from
>> > the domain, these policies remain in force and are locked
>> > on the local station.  Is there a way to remove these
>> > locked policies not that the box is part of a workgroup
>> > again?  Thanks Keven
>> >
>> > If you reply direct please remove no-spam.
>>
>>
>
>

Relevant Pages

  • Re: Faulting application services.exe... faulting module esent.dll.. Help!
    ... Drew Gillson Wrote: ... > Windows XP machines have had this message appear in the ... pushed down group membership policies for the admin group. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Windows XP remember GP when removed from domain
    ... I'm actually surprised that the policies are being reset on the Windows 2000 ... What you're seeing on the Windows XP SP1 machines is what I'd ... a new policy. ...
    (microsoft.public.windows.group_policy)
  • Windows XP Profile Settings
    ... that we like to implement on our user's machines to make them all ... Make the desktops Windows Classic as well as make the Start Menu Windows ... for each and every person that logs onto each computer, ... Windows XP policies apply to every new user logging in. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group polices not getting implemented on XP professional
    ... I have tried the things but still not getting policies on clients, ... Tahnks & Regards ... This setting should be found on the XP machine under the local policy. ... Upgrading Windows 2000 Group Policy for Windows XP ...
    (microsoft.public.win2000.active_directory)
  • Re: Windows XP remember GP when removed from domain
    ... > these policies remain in force and are locked on the local station. ... and disallowing local policy management of their values. ... Microsoft MVP (Windows Server System: ... What you're seeing on the Windows XP SP1 machines is what I'd ...
    (microsoft.public.windows.group_policy)
Quantcast