[gptalk] Re: GPO applicability when not connected to a network/domain

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Tue, 12 Feb 2008 15:41:30 -0800


Thanks for joining the list. Unfortunately, I don't have good news for you.
Policy is not applied if a computer is not in contact with a DC. So, there
is no way (other than Windows Firewall profiles) to have conditional
policies in effect based on being on or off the network. Even mucking with
the local GPO won't work for domain joined PCs because if those PCs are not
in contact with a DC, they simply ignore any changes you try to make to the
local GPO (to preserve domain precedence).


Sorry about that. One thing you can probably do is write a script that
enables and disables the proxy and put a shortcut to it on their desktop,
with instructions to use it when they are at home. I've done that sort of
thing in the past and, while not elegant, works.



From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Shane Williford
Sent: Tuesday, February 12, 2008 1:45 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] GPO applicability when not connected to a network/domain


"GPO Guy",

Thank you for the great website!...VERY informative!


I was wondering if you could lead me to the Microsoft documentation (and if
you could answer) explaining if GPOs get applied to computers (laptops) not
connected to a domain/network. I have set some IE settings for our
organization, and have a group that use laptops and work remotely (from
home) at times. I want them to be able to not have the proxy configurations
while not connected to the network. Is there a way to configure GP to not
apply when not connected to the network (other than creating a local policy
setting for IE)?

Thanks for all your help!


Shane M. Williford

Systems Administrator

MCSE, MCSA Sec, Sec+, Net+, A+

Mazuma Credit Union


816-361-4194 x6012


Notice: The information transmitted in this e-mail may contain confidential
and/or legally privileged information intended only for the use of the
individual(s) named above. Review, use, disclosure, distribution, or
forwarding of this information by persons or entities other than the
intended recipient(s) is prohibited by law and may subject them to criminal
or civil liabilities. Statements and opinion expressed in this e-mail may
not represent those of Mazuma Credit Union. All e-mail communications
through Mazuma's corporate email system are subject to archiving and review
by someone other than the recipient. If you have received this communication
in error, please notify the sender immediately and delete/destroy any and
all copies of the original message from any computer or network system. 

Other related posts: