Can one Exempt a Computer from Application of Group Policy?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Can someone with local Admin access prevent Domain Group Policy from being applied to their Computer

How

Thanks
 
No

The propoagation of GPO objects is dependent upon the settings available
only to Domain admins or higher - or if the authority is delegated, to OU
admins.

There are options to force the Group Policy down to OUs that do not allow
the GPOs to be blocked even if the OU is trying to block it.. There is also
a "pecking order" as to how the policies will apply depending whether they
are applied at the domain, OU etc etc

If the local admin can work out specifically which registry entries were
loaded as a consequence of Group Policy they may be able to change them on
that PC by editing the registry but they would have to do that every time
they logged on.

Mike
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Group Policy Problems on new xp pro machine w/ SP3 1
Local Policy 3
Exempting a Computer from Application of Group Policy?! 2
Group Policy Problem 1
group policy "User Settings" ignored 4
Upgrading to Windows 2008 1
Group Policy is blocking Internet Explorer 2
Windows XP Logon script location 3

Back
Top