RE: Question on Local Security Policy

From: CP (CP_at_discussions.microsoft.com)
Date: 05/24/05 

Date: Tue, 24 May 2005 12:22:06 -0700

Thank you for ur response, Drumgod.

How do I prevent the domain level group policy from overriding the Local
Security Policy.

Regards

CP

"Drumgod" wrote:

> If thoses options are greyed out that means they are being controlled at the
> domain level by group policy. You will not be able to changes these options..
>
> "CP" wrote:
>
> > Hi there,
> >
> > I have a Windows XP Pro workstation that belongs to a Win 2K domain.
> > When I access the Local Security Policy on the computer, I find that Policy
> > objects like 'Account Policies' and 'Audit Policies' are 'greyed out' as in
> > non-configurable.
> >
> > Is there any way I can enable these policies at the local workstation, while
> > it is a member of a domain.
> >
> > Thanks in advance for any replies.
> >
> > Regards
> >
> > CP
> >
> >

Relevant Pages

  • Re: Domain
    ... Domain Controller Security Policy has all user rights assignments ... Configuring ipsec policy at the domain level ...
    (microsoft.public.win2000.group_policy)
  • Re: Security hierarchy
    ... policy level also. ... >>can be configured only at domain level. ... Try running security configuration and ... >>try not to change domain and domain controller policy, ...
    (microsoft.public.win2000.security)
  • Re: Login Scripts
    ... Default Domain Policy) that contains the "baseline" settings that users ... at the OU level will override settings declared at the domain level, and GPO ... > domain if no MSI package is found. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security hierarchy
    ... OK - last night I managed to reset the password policy. ... I had to boot into DS restore mode in order to be able to access the ... New users had to have complex passwords. ... >> I have tried all the suggestions plus a new top GPO at domain level ...
    (microsoft.public.win2000.security)
  • Re: Security hierarchy
    ... can be configured only at domain level. ... would only apply to local machine accounts if domain policy is overridden.. ... I have found that sometimes certain settings do not "show up" in a timely ... > Currently Domain and DC Security policy have all display password ...
    (microsoft.public.win2000.security)