Re: security policy 'not specified' option

From: Thor (Hammer of God) (thor_at_hammerofgod.com)
Date: 10/21/05

  • Next message: Manh Tho: "CFP: The First International Conference on Availability, Reliability and Security (AReS 2006), 20-22 April, 2006, Vienna, Austria" 
    To: "Tony King" <agkcomputers@btinternet.com>, <focus-ms@securityfocus.com>
Date: Fri, 21 Oct 2005 11:51:45 -0700

    Actually, "No-Override" only applied to GPO's linked to sites, domains, or
    OU's. It won't affect local settings. I touched on that in my first
    post...

    t

    ----- Original Message -----
    From: "Tony King" <agkcomputers@btinternet.com>
    To: <focus-ms@securityfocus.com>
    Cc: "'matthew patton'" <pattonme@yahoo.com>
    Sent: Thursday, October 20, 2005 3:45 PM
    Subject: RE: security policy 'not specified' option

    > If you have 'No Over-ride' set at the domain level for the OU in AD then
    > you
    > can stop local policy changes
    >
    > -----Original Message-----
    > From: matthew patton [mailto:pattonme@yahoo.com]
    > Sent: 20 October 2005 23:31
    > To: Tony King
    > Subject: RE: security policy 'not specified' option
    >
    >
    >> Once you have set a policy from Not Defined you can only select
    >> enable or
    >> disable, unless you reload the policy files from a clean build
    >
    > and therein lies the rub. MS conveniently doesn't let me do that any
    > more. does a domain policy categorially override any local settings?
    > Somehow I really doubt that would be the case.
    >
    >
    >
    > ---------------------------------------------------------------------------
    > ---------------------------------------------------------------------------
    >
    >
    >

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Manh Tho: "CFP: The First International Conference on Availability, Reliability and Security (AReS 2006), 20-22 April, 2006, Vienna, Austria"

    Relevant Pages

    • Re: Default Domain Controllers Policy
      ... the ONLY way that the Default Domain Controllers Policy would be ... appling to the Computers is if the Computer OU was inside the Default Domain ... Why are you trying to change Local Settings? ... overridden by Group Policies starting with the Default Domain Policy and then ...
      (microsoft.public.win2000.group_policy)
    • Re: Machine policy when user logged onto local machine
      ... in an OU that has an overriding policy. ... than local settings then policies from the domain are propagating assuming ... immediately in client computers. ... Group policies not propagating can be a result of physical network ...
      (microsoft.public.win2000.security)