Security templates applied locally vs applied through group policy

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi There!
Would a security template applied locally on a computer (W2k,W2k3, Win XP) be
overriden by security settings (under computer configuration node)of the
group policy linked to the OU containing that
computer account?

Now if they are overwritten ,then what is the point of applying security
policies locally instead of using GPO as it is recommended by Microsoft for
very large security templates to prevent banadwidth issues that will arise
as group policies refresh.
Your help is greatly appreciated.
 
Only settings that are also defined at the domain/OU level would override
Local Security Policy settings. Security templates can be imported into a
GPO however it is recommended to not use large templates such as the
security setup.inf template or others that have a lot of settings for file
system/registry as that can cause network lag and replication latency. Most
of the time you can achieve what you need with simple security templates
that do NOT include a lot of settings for file system/registry. I would not
recommend ever configuring file system/registry at the domain level. ---
Steve
 
Back
Top