[gptalk] Re: Ignoring local group policy

  • From: Jeremy Saunders <jeremy.saunders@xxxxxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Tue, 20 Feb 2007 13:08:06 +0900

I think you can modify NTFS permissions on it, which will prevent it from
applying to whom ever you don't want it to apply to.

Cheers.
                                                                
 Kind regards,                                                  
                                                                
 Jeremy Saunders                                                
 Senior Technical Specialist                                    
                                                                
 Infrastructure Technology Services                             
 (ITS) & Cerulean                                               
 Global Technology Services (GTS)                               
 IBM Australia                                                  
 Level 1, 1060 Hay Street                                       
 West Perth  WA  6005                                           
                                                                
 Postal: PO Box 525, West Perth WA                              
 6872                                                           
                                                                
 Visit us at                                                    
 http://www.ibm.com/services/au/its                             
                                                                
 P:  +61 8 9261 8412                F:  +61 8 9261 8486         
 P:  (Reception) +61 8 9261 8420    E-mail:                     
 M:  TBA                            jeremy.saunders@xxxxxxxxxxx 
                                                                
                                                                








                                                                           
             "Alan & Margaret"                                             
             <syspro@optushome                                             
             .com.au>                                                   To 
             Sent by:                  <gptalk@xxxxxxxxxxxxx>              
             gptalk-bounce@fre                                          cc 
             elists.org                                                    
                                                                   Subject 
                                       [gptalk] Re: Ignoring local group   
             20/02/2007 05:31          policy                              
             AM                                                            
                                                                           
                                                                           
             Please respond to                                             
             gptalk@freelists.                                             
                    org                                                    
                                                                           
                                                                           




Hi Nathan,

I don’t believe there is a way in Group Policy to turn off Local Policy. If
there was, you could get interesting behavior if you used Local Group
Policy to disable Local Group Policy processing….

However one way that you could achieve the desired result is to have a
script that runs that removes all of the settings. It is all held under
C:\WINDOWS\system32\GroupPolicy, so if your script was to replace that
structure with a “clean” structure it should have the desired effect.

If there was only a few machines, you should be able to just do it as a
once off.

Alan Cuthbertson


 Policy Management Software:-
http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml

ADM Template Editor:-
http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml

Policy Log Reporter(Free)
http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml




From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Nathan
Sent: Monday, 19 February 2007 9:48 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Ignoring local group policy

Hi,

We have some PC's running XP that have some local policy settings
enabled/configured.

Is it possible using GP, to setup a computer to ignore local policy and
only apply GP?

Thanks

Nathanb��j{�����y�jY��v)�����֥��������+-���a�{.n������J�����
�x"��������n)����z����+-j�����i�^j������祊���?j�!��mjY?

Other related posts: