Local GPO

  • Thread starter Thread starter G. Samuel Hays
  • Start date Start date
G

G. Samuel Hays

When settings the local GPO, do both user "Local Computer Policy" and "User
Configuration" apply to all users?

For instance, lets say on a workstation in a workgroup, I log in as
administrator and set up a bunch of User Configurations. Do those apply for
everyone including administrator? Same deal for Local Computer Policy.

Can someone either explain this to me or point me to a KB article?

Thanks so much,
Sam
 
Hi Sam,

By default, yes and yes. The Computer Configuration section of the local
policy is always applied (regardless of the user - this holds
computer-related settings)**. The User Configuration section of the local
policy is applied to all users by default (although you can block this see
options below).

To apply policy settings to everyone accept administrators in a workgroup
environment you basically have three options:

- Use System Policy

Local Group Policy Objects Cannot Be Set on a Per-User Basis
http://support.microsoft.com/?id=218601

and

http://www.jsiinc.com/SUBF/TIP2700/rh2786.htm

- Deny Administrators the read permission to the local policy (it's stored
in %Systemroot%\System32\GroupPolicy and is a hidden folder) after changing
the necessary policies.

- Use the method described in this KB article:

HOW TO: Apply Local Policies to all Users Except Administrators on Windows
2000 in a Workgroup Setting
http://support.microsoft.com/?id=293655

Mike

** Technically you could also block the application of the Computer
Configuration section of the local policy by denying the SYSTEM the read
permission to the local policy, but this would be pointless - just remove
the settings you don't want configured from the policy.

------------------------------------------------------------------
Mike Aubert
MCSE, MCSD, MCDBA
(e-mail address removed)

Note the "news2" in my email address is temporary and may be changed in the
future, remove it to email me at my Permanente address.
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top