Re: Accessing Local Security Policy remotely

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Yes, you can edit the local security settings via a remote MMC, however as
Chris has said, in almost all circumstances the domain, site and OU GPOs
will override this.

You would probably be better creating a GPO and linking it to an object high
enough up the tree to encompass all of these boxes, and then filtering it by
a group that these computers are members of.

GPO Filtering:
-- http://www.msresource.net/content/view/15/47/

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net



.



Relevant Pages

  • Re: GPO for servers only
    ... The best way is to have the servers in an OU and apply the GPO to the OU. ... instead of deleting the accounts. ... I want to use GPO filtering but is there any performance issue ...
    (microsoft.public.windows.group_policy)
  • Re: restricting logon rights to certain machines
    ... Create a GPO and link to the domain. ... necessary computers into this group. ... This is called GPO filtering. ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO for servers only
    ... I want to use GPO filtering but is there any performance issue ... assciated with GPO processing from having to do it this way?? ... >then put those servers computer accounts into that group. ...
    (microsoft.public.windows.group_policy)
  • Re: GPO for servers only
    ... The other option would add another GPO anyhow. ... I want to use GPO filtering but is there any performance issue ... > assciated with GPO processing from having to do it this way?? ... >>then put those servers computer accounts into that group. ...
    (microsoft.public.windows.group_policy)
  • Re: Password Policy
    ... Chris, thanks for the reply. ... Ok, let me clarify. ... just 3 servers, and no other GPOs, of course, I will be at the other site ... >> something different with the Password Policy GPO or something is broke. ...
    (microsoft.public.windows.server.active_directory)