Re: Local group policy overides Domain Group Policy

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 01/21/05 

Date: Fri, 21 Jan 2005 12:54:12 -0700

Your understanding is correct, local should be first read and
so overwritten by any AD based policy settings.

What are the three specific policies involved here ? 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Marcy Daeffler" <MarcyDaeffler@discussions.microsoft.com> wrote in message
news:40C9AAF2-BC26-40F9-8DBC-48772FDB39FC@microsoft.com...
> I have a situation where I have several group policies that are being
applied
> to computers in a container.  The policies all apply fine with the
exception
> of 3 settings in one of the policies.  I checked the local group policy on
> the workstation and the three settings are all set to Disable.  If I
manually
> change them to Not configured the policy gets applied correctly.  My
> understanding was that the local policy got over written by the group
> policies from the domain...  Am I wrong in this assumption???
>
> I am trying to figure out how to resolve this with out having the go out
and
> remove the local policies on all the workstations we have already
deployed.
>
> Thanks!
>

Relevant Pages

  • Re: Registry tatooing
    ... I'm working on a utility that will clean up GP policies and preferences. ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php ... Administrative policies work very similar to NT4 System Policies. ... Well, to his disliking, the settings remained. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local GPO refreshes outside of refresh interval
    ... I looked through my GPO's Windows Settings section ... > Some policies, including IE policies, have a checkbox that defines if this ... > it should apply EVEN if the value defined in GPO did not change since the ... we are talking about one particular policy: ...
    (microsoft.public.windows.group_policy)
  • Re: Registry tatooing
    ... It can list and clean true policies, ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php ... Well, to his disliking, the settings remained. ...
    (microsoft.public.windows.server.active_directory)
  • Re: New Password Policy Implementation Problem
    ... Default Domain Group Policy object. ... > able to implement the following settings via the Default Domain ... > Enforce Password History ... > These policies were enforced for all domain users and we verified the ...
    (microsoft.public.win2000.group_policy)
  • Re: New Password Policy Implementation Problem
    ... Default Domain Group Policy object. ... > able to implement the following settings via the Default Domain ... > Enforce Password History ... > These policies were enforced for all domain users and we verified the ...
    (microsoft.public.windows.group_policy)