Friday, January 2, 2015

Local Group Policy

applies only locally (can export/import)

computer configuration applies to all

user configuration applies to all unless

  • administrator/non-administrator polcy
  • user specific policy (not groups)
  • multiple local group policy

can use on any domain or non-domain except DC

  • local policy not set on DCs

local processing can be disabled via a GPO

  • prevent user overriding GPO


  • services with specific exceptions (disable ctrl panel except admins)
  • non-domain system - ie standalone PC

Overrding local policy processing.

Multiple Local Group policy - allows one policy for specific local user (no domain or local group)

No comments:

Post a Comment