question on Global policy on AD domain

[harveymasons]

I have a question on global policy. If there is a policy in effect from an AD domain server and the policy restricts or allows a service to start or stop can/will this policy stil be in effect off the domain?? like when they log in using cached accounts? The policy in question only changes things on the local computer, seeing the domain would not be required.

IOW- Does the policy cache itself on the local computer like the domain user account does??

 

[Wishdiak]

harveymasons,

If a user is logging in using cached credentials (such as on a laptop when not connected to the network), then Group Policy settings will be cached on the local computer.

I'm not certain what you refer to by "global policy". GPO's can be applied at the domain, site, or OU level, but not at the group level. "Global policy" implies that you have them applied at the group level.

Wishdiak
A+, Network+, Security+, MCSA: Security 2003

http://www.wishdiak.com

 

[Niksen]

group policy is actually just a fancy registry editor.

when you apply a policy to some domain, site or OU, the computers affected will inherit this registry change.

this change will not be reverted unless you unapply the policy.

brgds Nicolai