Re: no GPO how ?



You can configure a local policy, but it will probably be of
limited value.
The order of application of GPO's is:
Local
Site
Domain
OU
Child OU

GPOs lower in the list have higher priority, i.e. their settings
override any conflicting settings in the policies higher in the
list. "Block Inheritance" and "No Overrride" can change this
inheritance behaviour.
Moreover, you cannot filter a local policy with security groups.

You should really talk to the IT managers at headquarters and have
them apply the policy settings that you want to your TS.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
*----------- Please reply in newsgroup -------------*

"IT Staff" <jkklim@xxxxxxxxxxx> wrote on 15 sep 2006:

my SINGLE win2003 enterprise TS machine is part of the AD
domain. However we are not given the permission to govern our OU
gpo, etc In another words, our GPO is grey out.

I've read books and in this forum that GPO is the way to go for
easy managability.

Since our headoffice does not allow us "freedom" to manage GPO,
can changing local policy on my single TS helps ? ie the local
gpedit.msc will do what in a domain GPO does ?

.



Relevant Pages

  • Re: Possible Bad Question
    ... > question states that the Local Policy locks her out after 3 attempts ... > the DDC GPO, wouldn't the Domain policy OVERRIDE the Local policy? ... >> the DDC GPO settings not DD GPO settings. ...
    (microsoft.public.cert.exam.mcsa)
  • Re: Possible Bad Question
    ... > question states that the Local Policy locks her out after 3 attempts ... > the DDC GPO, wouldn't the Domain policy OVERRIDE the Local policy? ... >> the DDC GPO settings not DD GPO settings. ...
    (microsoft.public.cert.exam.mcse)
  • Re: Prevent logons other than PC owner?
    ... log on rights in local policy rather than by GPO. ... limiting all accounts without fail). ... >> In a domain Users includes Domain Users, ...
    (microsoft.public.windows.server.security)
  • Re: Deploy a local policy
    ... Get a GPO defined and linked to your OU and write of its ... by being innovative or by visiting 600 machines. ... being controlled by AD based GPO policy settings. ... > I need to change the local policy of all my computers in my domain. ...
    (microsoft.public.win2000.security)
  • RE: Create user that dont have access to domain
    ... Through a GPO or local policy? ... It is not a good idea to have generic logins in any environment. ... apply a very restrictive GPO that restricts their access to browsing and ... Local policy settings for Windows XP: ...
    (microsoft.public.windows.server.active_directory)