Domain Policies

Posted on 2005-04-22
Medium Priority
Last Modified: 2013-12-04
I have two laptops that are part of my domain.  I have group policy that locks out users from opening javascript and other policies restricting access to other stuff on their local pc(such as c: drive).

Now, the two laptops in the domain, I dont want any policies applied to them at all.  I want them to be free from the group policy.  I created an OU in AD under the main Domain with group policies.  I named the OU "Deny Group Policy" and went into properties and checked the Block Policy Inheritance.  But it doesnt work.  How can i get group policy to avoid setting security settings on those laptops.

The reason is the user is having problems opening Javascripts.  

Please help experts.

Question by:cjjimbos
LVL 16

Expert Comment

ID: 13845632
one question - was the policy originally applied to this laptops before adding the  new OU?

if so, then the changes to the registry have been enforced, and have to be explicitly 'undone' - ie, you need to either manually change the reg back, or enforce a policy on that OU that turns off the previously enforced changes.

Expert Comment

ID: 13845732

just make 2 user accounts that are not inside that group. make a new group and drop them in there. they will only recieve global policies then.

Author Comment

ID: 13845788
Yes it was applied prior to the laptop being put into the OU.  So what policy do  i turn off the previously enforced changes.
A Cyber Security RX to Protect Your Organization

Join us on December 13th for a webinar to learn how medical providers can defend against malware with a cyber security "Rx" that supports a healthy technology adoption plan for every healthcare organization.

LVL 14

Expert Comment

ID: 13849066
if you turned on a policy and it changed the registry in the laptop you have to turn on an oposite setting in the policy to restore the old settings or edit the settings on the laptom manually.
LVL 16

Expert Comment

ID: 13854721
yes, unenforce the same policies that were previously enforced....

Author Comment

ID: 13868858
How do you un-enforce a policy on a workstation(laptop)?  Im using Windows 2003 Server/AD.  The laptop is an XP Pro OS.
LVL 16

Accepted Solution

JammyPak earned 1500 total points
ID: 13875095
you could manually change the registry (and use the .adm file to figure out which reg entry to change) but it's much easier to use AD and GPO...put the machines in an OU, and greate a GPO for that OU which has those policies set to 'disable' (or whatever the setting is, it may be called something different for different policies.

Here's a link about .adms, but that's doing it the hard way...

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Users of Windows 10 Professional can disable automatic reboots using the policy editor. This tool is not included in the Windows home edition. But don't worry! Follow the instructions below to install (a Win7) policy editor on your Windows 10 Home e…
Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
Integration Management Part 2
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Suggested Courses

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question