Group Policy and Local Policy

[Darkz]

Hello,

I am trying to use group policy settings to provide control over our
clients and from what i know , if a pc is part of a domain the domain
policy takes precedence over the local computer policy.Is this still
true when the local admin is logged on to the computer? Also, if a
domain user has local admin rights on the computer that he/she is
logged on to which policy takes precedence?
Thank you for your time
Ahmad

 

[Florian Frommherz]

Howdy Ahmad!

I am trying to use group policy settings to provide control over our
clients and from what i know , if a pc is part of a domain the domain
policy takes precedence over the local computer policy.Is this still
true when the local admin is logged on to the computer?

Yes, that is still true. If you mean the Builtin administrator by "the
local admin", then only the computer configurations of your group
policies will take effect since the local admin is no user in your
Active Directory and is therefore not targeted.

Also, if a
domain user has local admin rights on the computer that he/she is
logged on to which policy takes precedence?

Both do. If the settings contradict each other, the settings coming from
the domain always "win". It's L-S-D-OU. Local Polcies get overriden by
site policies that get overriden by domain policies that get overriden
by... and so on ;-)

cheers,

Florian

 

[Darkz]

Thank you so much
Ahmad