When you unplug the network cable, how to the policies stay applied???

[Dave Niemeyer]

How do these GPO's stay in effect when you unplug the network cable? Just
for an experiment, we unplugged the network cable to a machine, shut down
and restarted, logged in as a user that had just had some unique GPO applied
to him, and we predicted that the policy would be removed, but it wasn't, it
was still applied. BUT I thought that GPO's don't "tatoo" themselves into
the registry. So how did the policies stay in effect???

Dave Niemeyer

 

[Eric Voskuil]

Hi Dave,

If your computer is still a member of the domain, and you are still logging
on to a domain account, the computer/user will still attempt to run your
network GPOs. It can't when the network isn't available. As a result,
client-side extensions are not launched and nothing changes form the last
successful policy refresh. You can verify this by monitoring the
userenv.log in verbose mode.

http://support.microsoft.com/default.aspx?kbid=250842

What each client side extension does to the computer can only be done when
that extension is launched by the OS, and is this case they never get
launched. It sounds like you are talking about Administrative Templates
policy. These will be erased when policy is refreshed and then the current
settings will be applied from your GPOs. The intent is that the policies
remain effective until the next update.

Regards,

Eric Voskuil
Policy Maker
http://www.autoprof.com/policy