Local Group Policy

applies only locally (can export/import)

computer configuration applies to all

user configuration applies to all unless

• administrator/non-administrator polcy
• user specific policy (not groups)
• multiple local group policy

can use on any domain or non-domain except DC

• local policy not set on DCs

local processing can be disabled via a GPO

• prevent user overriding GPO

usefulness

• services with specific exceptions (disable ctrl panel except admins)
• non-domain system - ie standalone PC

Overrding local policy processing.

Multiple Local Group policy - allows one policy for specific local user (no domain or local group)