Question about local security policy

T

Todd S

When I start SECPOL.MSC on one of my XP workstations in my
2000 domain and I look at the local security settings I
have several items that are defined. For example, 'Load
and Unload Device Drivers' is set to Administrators.

Now when I run a RSoP on that same XP workstation the
computer setting is 'Not Configured'. No where in my AD
is that item defined. I was under the impression that
LSDOU (local site domain ou) was the way policies are over
written but if they aren't configured in the upper part of
the higharchy (an OU for example) then the lowest setting
wins. If that is the case then how is the local security
settings getting changes from defined to not defined?

Thanks.
 
R

Roger Abell

Why you are seeing what you say you see, I do not know.
But, you are right. If SDOU GPOs do not set a different
value from what is set in local policy, then you should
see the local being effective.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top