Re: Question on Local Security Policy

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 05/25/05

  • Next message: Roger Abell: "Re: Auditing ?" 
    Date: Tue, 24 May 2005 18:33:48 -0700

    Actually, to free account policies from being impacted by GPOs
    from the forest you need to make sure that the Account policies
    are "Not Defined" in any OU-linked GPOs that have the machine
    within their scope of influence. Only then will they be available
    to be set at the level of the Local Security Policy.

    The Account policies set in GPOs linked to the domain are not
    involved here, as those affect only domain accounts and have
    their impact upon the DCs. 

    -- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"CP" <CP@discussions.microsoft.com> wrote in message
news:8CC4981F-1C45-4759-9377-B7BC2C7A8237@microsoft.com...
> Thank you for ur response, Drumgod.
>
> How do I prevent the domain level group policy from overriding the Local
> Security Policy.
>
> Regards
>
> CP
>
> "Drumgod" wrote:
>
> > If thoses options are greyed out that means they are being controlled at
the
> > domain level by group policy. You will not be able to changes these
options..
> >
> > "CP" wrote:
> >
> > > Hi there,
> > >
> > > I have a Windows XP Pro workstation that belongs to a Win 2K domain.
> > > When I access the Local Security Policy on the computer, I find that
Policy
> > > objects like 'Account Policies' and 'Audit Policies' are 'greyed out'
as in
> > > non-configurable.
> > >
> > > Is there any way I can enable these policies at the local workstation,
while
> > > it is a member of a domain.
> > >
> > > Thanks in advance for any replies.
> > >
> > > Regards
> > >
> > > CP
> > >
> > >
  • Next message: Roger Abell: "Re: Auditing ?"

    Relevant Pages

    • Re: Backing out Complex passwords enabled in Domain Group policy.
      ... Most documentation I have seen states that all account policies can only be defined ... Define settings for all account polices at the domain level, ... and check the Local Security policy on the domain controller for effective settings. ...
      (microsoft.public.win2000.security)
    • Re: password
      ... Open Control Panel go to Administrative Tools, open Local Security Policy ... Then go to Account Policies, Password Policy, then go to maximum password ...
      (microsoft.public.windowsxp.accessibility)
    • Re: User Local Password Security Policy
      ... >Is there a place in Local Security Policy to change this value? ... Sercurity Settings / Account Policies / Password Policies. ... Windows: General MVP ...
      (microsoft.public.windows.server.general)
    • Re: password policy on Windows XP
      ... Load up 'Local Security Policy' in Administrative Tools. ... Click on Account Policies, Password Policy and make sure max password ...
      (microsoft.public.windowsxp.general)