Blocking Domain Policies

Posted on 2008-11-03
Medium Priority
Last Modified: 2013-12-04
Is there a way to block a domain policy to a local machine via a registry key or local policy setting?  I do not want to block this policy via A/D inheritance.  The policy must be blocked at a local level if possible.  Any Ideas?
Question by:stetlers
LVL 70

Accepted Solution

KCTS earned 252 total points
ID: 22870611
Domian policies will always take precidence - unless you put the machine in an OU and block policy inheritance on the OU or to use security filtering http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Security-Filtering.html

In any event it has to be done at the domain not at the client

Assisted Solution

jopela earned 248 total points
ID: 22870660
Unfortunately there is no way to do this at the PC level. Group policy wants to be in control. If you do not want to create a group to block inheratance and put this PC in it you can create a GPO and set it to 'undo' whatever other policies you do not want to be applied to this computer. Then assign the policy to this computer only and set it for no override.

Featured Post

Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question