Group Policy and Local Policy

  • Thread starter Thread starter Darkz
  • Start date Start date
D

Darkz

Hello,

I am trying to use group policy settings to provide control over our
clients and from what i know , if a pc is part of a domain the domain
policy takes precedence over the local computer policy.Is this still
true when the local admin is logged on to the computer? Also, if a
domain user has local admin rights on the computer that he/she is
logged on to which policy takes precedence?
Thank you for your time
Ahmad
 
Howdy Ahmad!
I am trying to use group policy settings to provide control over our
clients and from what i know , if a pc is part of a domain the domain
policy takes precedence over the local computer policy.Is this still
true when the local admin is logged on to the computer?
Click to expand...

Yes, that is still true. If you mean the Builtin administrator by "the
local admin", then only the computer configurations of your group
policies will take effect since the local admin is no user in your
Active Directory and is therefore not targeted.
Also, if a
domain user has local admin rights on the computer that he/she is
logged on to which policy takes precedence?
Click to expand...

Both do. If the settings contradict each other, the settings coming from
the domain always "win". It's L-S-D-OU. Local Polcies get overriden by
site policies that get overriden by domain policies that get overriden
by... and so on ;-)

cheers,

Florian
 
Back
Top