Question about local security policy

  • Thread starter Thread starter Todd S
  • Start date Start date
T

Todd S

When I start SECPOL.MSC on one of my XP workstations in my
2000 domain and I look at the local security settings I
have several items that are defined. For example, 'Load
and Unload Device Drivers' is set to Administrators.

Now when I run a RSoP on that same XP workstation the
computer setting is 'Not Configured'. No where in my AD
is that item defined. I was under the impression that
LSDOU (local site domain ou) was the way policies are over
written but if they aren't configured in the upper part of
the higharchy (an OU for example) then the lowest setting
wins. If that is the case then how is the local security
settings getting changes from defined to not defined?

Thanks.
 
Why you are seeing what you say you see, I do not know.
But, you are right. If SDOU GPOs do not set a different
value from what is set in local policy, then you should
see the local being effective.
 
Back
Top