Overriding Active Directory Group Policy.

  • Thread starter Thread starter Fred
  • Start date Start date
F

Fred

Is there any way to configure a network workstation
locally so that it blocks Active Directory group policies
from effecting the particuilar workstation?

For example, if there is a group policy that prevents the
log off button from appearing on the Windows Shutdown
Menu, can something be done locally on the workstation so
that the button will still appear despite the fact that
there is a group policy preventing it?
 
If the computer/user is in the scope of influence of the policy then the policy
should be enforced. If you do not want the policy to apply to a particular
computer/user then you will need to configure an OU with a GPO for that computer/user
with a overriding setting. It may be possible for a user to try to avoid new policy
settings by unplugging from the network, logging in with cached credentials, and then
later plugging computer back in. You can disable cached logons if that is a problem.
Also if a user has the ability to change settings, such as Internet Explorer settings
that are contrary to Group Policy, then those settings may not revert back to Group
Policy settings unless you configure your Group Policy to refresh those settings even
if a change in Group policy has not been implemented. --- Steve

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/36.asp -- Registry
policy processing will slow down logon process, so it should not necessarily be used
at large.
 
Back
Top