Group Policy - enabling and disabling

Hello everybody!!

Question re. Group policy.  This is what I did:
Set a Group Policy to define local administrator security
 On each workstation, Domain Users, Domain Admins and Administrator must be part of the local Administrators group
 Created an OU for all workstations/laptops to reside in – Workstations
 Properties of Workstations OU and create new Group Policy – NT Migration Policy
 Computer Configuration \ Windows Settings \ Security Settings \ Restricted Groups
 Add Group – Administrators
 Members of this group – NSW\Domain Admins, NSW\Domain Users, Administrators
 Migrate computers into this OU and confirmed that the group policy applied successfully
 Yesterday I decided to remove this policy linking to Workstation OU
 But today I had to Reapply again – as it caused problems, it had removed the permissions - bizarre!! Is this normal?  What happens when you remove a policy?  Surely it doesnt remove settings?

Cheers
Cat
byrcaAsked:
Who is Participating?
 
Nirmal SharmaConnect With a Mentor Solution ArchitectCommented:
>>>So disabling by a GPO - the clients will still retain the settings but deleting it will remove them?

No. No..Disabling the GPO will remove it from applying..its for temporary purpose...

What is your Exact requirement ?

Thanks
0
 
Nirmal SharmaSolution ArchitectCommented:
>>> Is this normal?

Yes...Group Policy are not like System Policies used in Windows NT. When the Group Policy is not applied to computers and users, the Client Side Extensions will process Group Policy modules to remove the settings from registry. In previous version of Windows if you apply System Policy and then remove it from operation the windows clients will inherit it forever..so Microsoft has changed it completey in Group Policy. You can Disable Group Policy from applying to workstations and users so that you can configure it properly or configure other policy and then re-enable it whenever you want.

Disabling a GPO is the best way..

Thanks
0
 
Nirmal SharmaSolution ArchitectCommented:
Please see this: -

Expected System and Group Policy Behavior with Windows 2000 Clients.
http://support.microsoft.com/default.aspx?scid=kb;en-us;253672

How to Disable a Group Policy.
http://www.microsoft.com/windows2000/en/advanced/help/default.asp?url=/windows2000/en/advanced/help/DisableGPO.htm

How to create a System Policy Setting in Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;en-us;318753
0
 
byrcaAuthor Commented:
So disabling by a GPO - the clients will still retain the settings but deleting it will remove them?
0
 
Nirmal SharmaSolution ArchitectCommented:
Thanks!
0
All Courses

From novice to tech pro — start learning today.