Local caching of AD-based Group Policy

I'm studying for the 70-270 exam and am confused about a point that I expect
to be tested on. A couple of sources, particularly the Exam Cram 2 text,
seem to strongly suggest that the SDOU settings will not be present if the
Win XP Pro client is booted and the user logged in while disconnected from
the domain. Thus if certain settings, like disabling the floppy, are to be
in effect if the user is away from the network, they should be in Local
Group Policy, not Domain-Based Group Policy. Other knowledgable sources
claim the opposite: That if the Win XP Pro client is booted and logged in on
the domain network, and the SDOU settings have been processed to completion
just once, then those settings (though not necessarily current) will be
present ever more, under all circumstances, provided that the user has a
domain account. Authoritative texts, such as ones about Win Server 2003,
Active Directory, and Group Policy are silent on the point.

Now, if AD-based Group Policy settings ARE actually cached on the Win XP Pro
client, could someone please tell me where they're stored? I'm actually
acquainted with the NTUSER.POL files, but haven't been able to establish
their exact function. From what I read somewhere in the distant past, it
seems like they might be to remove discontinued policies.

I hope I can provoke a little discussion, just to see if I hear any
agreement. It occurred to me that perhaps there has been confusion between
Cached Logon Credentials, Cached User Profiles, and Cached AD-Based Group
Policy. Well they are at least related, but do they actually go hand in
hand?


I'd sure appreciate any help you can give me on this matter.

Thanks!


.

Relevant Pages

  • RE: Several Problems; how to reset security and troubleshoot serve
    ... On the SBS security settings; I accept your response, ... On the Remote Assistance Issue I have check all of the settings as you ... What started me on the path of security problem was I had a simular problem ... Start the Microsoft Management Console Group Policy snap-in. ...
    (microsoft.public.windows.server.sbs)
  • Re: iNTERACTIVE LOGON welcome screen - make it go away
    ... I created a custom ADM file for these two settings ... and imported it into the GPO under the Computer Administritative templates. ... really great expertise in Group Policy often reply to posts including ... doing a gpupdate on that domain controller which ideally would be the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: group policy scrolling marquee
    ... Policy at the same time a great robust platform for configuration management ... is launced via one of the four events available through Group Policy but the ... to store their settings in one of two places. ... > As for the Marquee screen saver you'll note that the settings (including ...
    (microsoft.public.win2000.group_policy)
  • Re: File sharing
    ... When you run rsop.msc you will get a report screen showing Group Policy ... connections/Windows Firewall and what settings from what Group Policy. ... setting to accept connections on the local subnet plus connections from my ...
    (microsoft.public.windowsxp.security_admin)
  • RE: How to enforce Remote Assistance and Remote Desktop via GPO?
    ... By setting the GPO status to "user Configuration Settings Disabled" then ... I understand that you want to enforce remote ... assistance group policy settings and remote desktop group policy settings ... To enable remote desktop and remote assistance on specific Windows XP ...
    (microsoft.public.windows.server.sbs)