Tattooing Group Policy

F

Frank Bough

Hi all,

in the 2003 documentation, it states:

*****************************************************************************
Security settings may still persist even if a setting is no longer
defined in the policy that originally applied it.

Persistence in security settings occurs when:

1. The setting has not been previously defined for the computer.
2. The setting is for a registry object.
3. The settings is for a file system object.
*****************************************************************************


I am fine with points 2 and 3, and can recreate the behaviour no
problems.

However, with point 1, I dont seem to be able to recreate the
behaviour. Whenever I remove a GPO that set a setting on a previously
"not defined" item, or if I reset the item in the GPO to "not defined"
again, then the item on the target machine does not persist as the
above implies, but reverts to "not defined"??

Can anyone shed any light on this for me?

Many thanks.
 
F

Frank Bough

Hi all,

in the 2003 documentation, it states:

*****************************************************************************
Security settings may still persist even if a setting is no longer
defined in the policy that originally applied it.

Persistence in security settings occurs when:

1. The setting has not been previously defined for the computer.
2. The setting is for a registry object.
3. The settings is for a file system object.
*****************************************************************************


I am fine with points 2 and 3, and can recreate the behaviour no
problems.

However, with point 1, I dont seem to be able to recreate the
behaviour. Whenever I remove a GPO that set a setting on a previously
"not defined" item, or if I reset the item in the GPO to "not defined"
again, then the item on the target machine does not persist as the
above implies, but reverts to "not defined"??

Can anyone shed any light on this for me?

Many thanks.




Anyone at all?? Help?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top