Any way to prevent Domain GP from overwriting Local?

[Guest]

Is there a way either through scripting or a registry modification to prevent
a domain group policy from overwriting a local group policy?

Thank you.

 

[Mark Heitbrink [MVP]]

Is there a way either through scripting or a registry modification to prevent
a domain group policy from overwriting a local group policy?

disable winlogon service ... SCNR

Mark

 

[Guest]

Thak you for the quick response. Won't that prevent the user from logging on
to the domain? We only want to prevent a policy from overwriting the local

 

[Mark Heitbrink [MVP]]

Hi,

Thak you for the quick response. Won't that prevent the user from logging on
to the domain?

That´s the reason why I gave that "stupid" answer. You can´t.
The way GPOs are followed by the other is hardcoded.
LGPO -> Sites -> Domain -> OU

You have to define your effective settings in the last applied GPO.

Mark