Re: Bypass Domain GPO when not connected to network?
From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 10/25/05
- Next message: Jody Cohen: "Audit "Lock Computer" events"
- Previous message: Joe Richards [MVP]: "Re: password expiration policy for admin and system accounts ?"
- In reply to: Ross Luker: "Re: Bypass Domain GPO when not connected to network?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 25 Oct 2005 12:39:36 -0500
Hi Ross.
Like I said you may also want to post in one of the Microsoft
Active_directory newsgroups also. someone else may have a creative solution.
The policy that was configured via user rights is "computer" configuration
which is why it applies to all users on the computer. I don't know if your
remote users are centralized or not but another possibility is to create
another domain controller [could be on a laptop] and ship it to them to
connect to on a network if you have someone that could be responsible in
setting it up and securing it contains all your AD info]. Even though such
domain controller might be disconnected from your main network and its
security logs would show that it can not find the other domain controllers
it just may work and of course the computers would need to have their dns
configured to point to it. If that idea sounds interesting try testing it
out first. With the expense involved with having users coming in you may
also want to contact Microsoft support first. --- Steve
"Ross Luker" <ross_luker@hotmail.com> wrote in message
news:1130251798.063237.68580@g43g2000cwa.googlegroups.com...
> Damn, ok....
>
> Unfortunately the VPN is a custom app, rather than using Windows dialup
> networking, so we can't use that...also, ALL accounts on the PC are
> locked in the same way (I would have thought the domain ploicy would
> only apply to domain accounts, but it appears to have applied globally
> to the PC). Oh well, guess the users will have to come in...thanks for
> the advice...
>
- Next message: Jody Cohen: "Audit "Lock Computer" events"
- Previous message: Joe Richards [MVP]: "Re: password expiration policy for admin and system accounts ?"
- In reply to: Ross Luker: "Re: Bypass Domain GPO when not connected to network?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
