Re: Question on Local Security Policy

From: Danny Sanders (Danny.Sanders_at_NO-SPAMcpcmed.org)
Date: 05/24/05 

Date: Tue, 24 May 2005 15:55:32 -0600

> How do I prevent the domain level group policy from overriding the Local
> Security Policy.

Either remove the computer from the domain or move the computer into an OU,
set the account policies as you want at the OU level. Account policies set
at the OU level only take affect when logging on locally to a computer in
the OU.

When not on the domain log on locally.

hth
DDS W 2k MVP MCSE

"CP" <CP@discussions.microsoft.com> wrote in message
news:8CC4981F-1C45-4759-9377-B7BC2C7A8237@microsoft.com...
> Thank you for ur response, Drumgod.
>
> How do I prevent the domain level group policy from overriding the Local
> Security Policy.
>
> Regards
>
> CP
>
> "Drumgod" wrote:
>
>> If thoses options are greyed out that means they are being controlled at
>> the
>> domain level by group policy. You will not be able to changes these
>> options..
>>
>> "CP" wrote:
>>
>> > Hi there,
>> >
>> > I have a Windows XP Pro workstation that belongs to a Win 2K domain.
>> > When I access the Local Security Policy on the computer, I find that
>> > Policy
>> > objects like 'Account Policies' and 'Audit Policies' are 'greyed out'
>> > as in
>> > non-configurable.
>> >
>> > Is there any way I can enable these policies at the local workstation,
>> > while
>> > it is a member of a domain.
>> >
>> > Thanks in advance for any replies.
>> >
>> > Regards
>> >
>> > CP
>> >
>> >

Relevant Pages

  • Re: Impact of GPO during logon
    ... That's the right idea but you should not apply the group policy at the ... MS recommend not applying any other GPO at domain level apart ...
    (microsoft.public.win2000.active_directory)
  • Re: SYSTEM ADMIN
    ... I assume you are talking about an Active Directory domain. ... Group Policy where you can edit/add/create Group Policies -GPO. ... user accounts must be in that OU or child OU for those settings to apply. ... Generally you configure policies at the domain level that you want to apply to all ...
    (microsoft.public.win2000.group_policy)
  • Group Policy Not Working
    ... domain level group policy is overwritting my local grouop ... domain settings were introduced, and disconnect the ... I get my local Group Policy ...
    (microsoft.public.windowsxp.security_admin)
  • Re: The local policy of this system does not permit you to log on interactively
    ... done on Domain Controllers OU, not on Domain level or local configuration -- ... You don't have to make any new OUs, just edit Existing Group Policy on ...
    (microsoft.public.windows.server.general)
  • Re: Restrict computers user in an OU or Group can log on to
    ... Deny Logon Local seems to be a very good idea. ... XP machines all have local ... group policy method both Steven and I have thought of? ... > overriding local policy. ...
    (microsoft.public.win2000.security)