Re: What Settings stick... GPO's and Security Template??

Tech-Archive recommends: Fix windows errors by optimizing your registry



I believe you are asking what settings will remain in the local policy
if those settings have been applied by AD based GPO but this is
then later removed. You asked in terms of local template, but a
template is just a static file that is not actively involved in the state
control over the system. Once a template has been imported into
the local group policy then it is actively applied, subject to the
normal rules (LSDOu) whereby AD based GPO will contol if
there is a conflict. Of course, if the AD based conflict in settigs
is removed then the local ones will regain control.

"Jono" <Jono@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:45ECA358-0D11-4C6C-B1D7-03F9A1348D11@xxxxxxxxxxxxxxxx
If a server has both GPO and local Security Template applied which
settings
will stick?
I am aware that the account (password) policy will only be applied from
the
Domain level but what will happen with other settings.
eg. If I disable to ability to 'shutdown without logging on' in a local
template but the GPO sets it to enable what will apply?

Is there differences for different areas in the GPO / Template?
eg User Rights Assignment, Security Options


.



Relevant Pages

  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... > Server Security and Auditing Policy ... > This list only includes links in the domain of the GPO. ... > The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO not picking up computer settings
    ... to the domain container with the password/account settings you want. ... for password/account settings and from what GPO. ... buying any of the highly rated AD or Group Policy books you see at Amazon or ... I have changed all the passwords back to what they were so users are now ...
    (microsoft.public.windows.server.security)
  • Re: Local GPO refreshes outside of refresh interval
    ... I looked through my GPO's Windows Settings section ... > Some policies, including IE policies, have a checkbox that defines if this ... > it should apply EVEN if the value defined in GPO did not change since the ... we are talking about one particular policy: ...
    (microsoft.public.windows.group_policy)
  • Re: IE Maintenance Group Policy Settings Issue
    ... If you configure a GPO to set the proxy to blank, ... be identified as a change to the policy and it will be re-applied to the ... This would be a GPO change and the settings ...
    (microsoft.public.win2000.group_policy)