Is there a way either through scripting or a registry modification to prevent
a domain group policy from overwriting a local group policy?

Thank you.

houghaptea schrieb:
> Is there a way either through scripting or a registry modification to prevent
> a domain group policy from overwriting a local group policy?

disable winlogon service ... SCNR

Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
extend GPO: www.desktopstandard.com
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.

Thak you for the quick response. Won't that prevent the user from logging on
to the domain? We only want to prevent a policy from overwriting the local

"Mark Heitbrink [MVP]" wrote:

> houghaptea schrieb:
> > Is there a way either through scripting or a registry modification to prevent
> > a domain group policy from overwriting a local group policy?
>
> disable winlogon service ... SCNR
>
> Mark
> --
> Mark Heitbrink - MVP Windows Server
> Homepage: www.gruppenrichtlinien.de
> extend GPO: www.desktopstandard.com
> PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.
>

Hi,

houghaptea schrieb:
> Thak you for the quick response. Won't that prevent the user from logging on
> to the domain?

That´s the reason why I gave that "stupid" answer. You can´t.
The way GPOs are followed by the other is hardcoded.
LGPO -> Sites -> Domain -> OU

You have to define your effective settings in the last applied GPO.

Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
extend GPO: www.desktopstandard.com
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.