Group Policy - enabling and disabling

Posted on 2005-03-09
Medium Priority
Last Modified: 2010-05-18
Hello everybody!!

Question re. Group policy.  This is what I did:
Set a Group Policy to define local administrator security
 On each workstation, Domain Users, Domain Admins and Administrator must be part of the local Administrators group
 Created an OU for all workstations/laptops to reside in – Workstations
 Properties of Workstations OU and create new Group Policy – NT Migration Policy
 Computer Configuration \ Windows Settings \ Security Settings \ Restricted Groups
 Add Group – Administrators
 Members of this group – NSW\Domain Admins, NSW\Domain Users, Administrators
 Migrate computers into this OU and confirmed that the group policy applied successfully
 Yesterday I decided to remove this policy linking to Workstation OU
 But today I had to Reapply again – as it caused problems, it had removed the permissions - bizarre!! Is this normal?  What happens when you remove a policy?  Surely it doesnt remove settings?

Question by:byrca
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
LVL 35

Expert Comment

by:Nirmal Sharma
ID: 13503234
>>> Is this normal?

Yes...Group Policy are not like System Policies used in Windows NT. When the Group Policy is not applied to computers and users, the Client Side Extensions will process Group Policy modules to remove the settings from registry. In previous version of Windows if you apply System Policy and then remove it from operation the windows clients will inherit it forever..so Microsoft has changed it completey in Group Policy. You can Disable Group Policy from applying to workstations and users so that you can configure it properly or configure other policy and then re-enable it whenever you want.

Disabling a GPO is the best way..

LVL 35

Expert Comment

by:Nirmal Sharma
ID: 13503250
Please see this: -

Expected System and Group Policy Behavior with Windows 2000 Clients.

How to Disable a Group Policy.

How to create a System Policy Setting in Windows 2000

Author Comment

ID: 13503268
So disabling by a GPO - the clients will still retain the settings but deleting it will remove them?
LVL 35

Accepted Solution

Nirmal Sharma earned 1500 total points
ID: 13503334
>>>So disabling by a GPO - the clients will still retain the settings but deleting it will remove them?

No. No..Disabling the GPO will remove it from applying..its for temporary purpose...

What is your Exact requirement ?

LVL 35

Expert Comment

by:Nirmal Sharma
ID: 13588649

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
The Summer 2017 Scholarship Winners have been announced!
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …
Suggested Courses

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question