[gptalk] Re: Applying GPO to a Local User Account

  • From: Omar Droubi <omar@xxxxxxxxxxxxxxxxxxxxx>
  • To: "gptalk@xxxxxxxxxxxxx" <gptalk@xxxxxxxxxxxxx>
  • Date: Thu, 4 Sep 2008 14:44:40 -0700

What exactly are you trying to accomplish/lockdown for that user?

you may be able to get some benefit from GPO using the computer side of the 
house and you may also be able to restrict some settings using mandatory user 
profiles.

What is the business need for a local account opposed to a single domain 
account- is it a problem with an application that can only work with local 
accounts?

Since many of the user group policy settings get applied in the registry- you 
may be able to get the GPO functionality to get imported with a registry import 
script that runs when the user logs on._ just a thought.


Omar Droubi
omar@xxxxxxxxxxxxxxxxxxxxx
650-726-0300
________________________________________
From: gptalk-bounce@xxxxxxxxxxxxx [gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of 
Matt Cross [mrforklift@xxxxxxxxxxxxxxx]
Sent: Thursday, September 04, 2008 02:30 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Applying GPO to a Local User Account

I have the following environment:

Windows 2003 Forest
Windows XP SP3

I have created a GPO to apply to a specific group in the domain and
removed Authenticated Users from the security filter.  The policy works
perfectly for any situation involving a domain account logging into the
XP client; however, only the Computer side of the GPO applies when
logging in with client-local account.

There is a business need for the one local account to exist on the
client and have the same lockdowns applied.  Is there a way to apply the
GPO to a local account?

--
Matt Cross, MCSE: Messaging
mailto:mrforklift@xxxxxxxxxxxxxxx

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: