Re: Deploy Group Policy to non-AD systems

Tech-Archive recommends: Fix windows errors by optimizing your registry



Howdie Samson!

Samson wrote:
Mark,

It worked!!!! Thank you! Once more question...once AD is ready how will it affect the local group policies that I set on the laptops. Say for example we have these systems join AD. I am under the impression that the Domain or Global policies will overwrite the local policies. Is this correct or is it vice versa?

Group Policies will apply in the following order:
L-S-D-OU-SubOU...

where L stands for local, s for site, d for domain and OU for organizational units. By applying the policies in this order, newer policies, that have settings defined that do not match settings set before, will be overwritten. It's the "last writer wins" method.

You have for example used the local Group Policy (gpedit.msc) to set the computer's proxy server to 192.168.17.17 - and defined another policy on the OU where the computer object of that computer lies with the proxy IP of 192.168.20.20 - it will first apply the 192.168.17.17 of the local Group Policy and then apply the GPO from the OU and overwrite the setting with the 192.168.20.20.

cheers,

Florian
--
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
.



Relevant Pages

  • Local GPO refreshes outside of refresh interval
    ... We are experiencing an unique situation where local group ... we are talking about one particular policy: ... a homepage on users and therefore, we never set this policy on the AD GPO. ... Even though we knew that group policies are refreshed every 90 minutes on ...
    (microsoft.public.windows.group_policy)
  • Question Regarding Applying Local Group Policy
    ... I'm new to setting policies. ... Windows XP Professional cash registers. ... Under Groups I added a group CSR ... the Local Group Policies to the CSR group policy and then ...
    (microsoft.public.win2000.group_policy)
  • Re: Local V AD implemented policies
    ... > In a new desktop implementation, it is planned to have LOCAL group ... > that local policies will be applied until machines are joined to the ... > when the machines join the domain. ...
    (microsoft.public.windows.group_policy)
  • Local V AD implemented policies
    ... In a new desktop implementation, it is planned to have LOCAL group policies ... that local policies will be applied until machines are joined to the domain. ... when the machines join the domain. ...
    (microsoft.public.windows.group_policy)