Re: Local Group Policy
- From: "chriske911" <chriske911-nospam@xxxxxxxxx>
- Date: Tue, 05 Apr 2005 12:33:40 +0200
Chris S. brought next idea :
Hi,
My understanding is that for GPOs, the LSDOu precedence takes effect in an AD. I've been told that there's no need to configure the Local grp. policy and use "out-of-box" configuration that comes with the OS installation!
However, there're no LGPO in a default installation except minimal settings. For example, some services which are not required may be Enabled in a default installation.
The reason given to me is that the Domain or OU policy will takes effect when the client workstation or member server is connected to the AD.
I've the following question, assuming that users only logon to the domain (no local account logon):
a. If the machine is disconnected from the AD, there'll be no GPOs applied when user logon using the domain cache credentials?
b. Even when the m/c is last syn. with the Domain-level policy, disconnecting it from the AD and after reboot - this mean that all the domain/OU GPO settings will be lost?
c. How will a laptop be affected? Without the LGPO, the min. configuration will not be enforced and will now use the default Microsoft settings?
Greatly appreciate any advice. Thanks in advance.
Chris. S.
alterations by GPO stick until manually or programmatically altered by user or admin or scripting or whatever
there is no turning back to defaults by design of MS
grtz
-- This is an automatic signature of MesNews. Site : http://www.mesnews.net
.
- References:
- Local Group Policy
- From: Chris S.
- Local Group Policy
- Prev by Date: Re: Terminal Server wallpaper and SP1
- Next by Date: Re: Problem with forcing Offline Files encryption.
- Previous by thread: Local Group Policy
- Next by thread: Re: Local Group Policy
- Index(es):
Relevant Pages
|
