disable GPO when not connected to network

Posted on 2009-02-10
Last Modified: 2012-05-11
I am looking to redesign how our laptops work on and off our network, we have GPO's in place however i want the laptop to work alot better when in standlone (or not connected to the network).

At the moment when users log in we have a GPO for the laptops that:

- disblaes wireless service
- enables RPC locator
- Enables IE Proxy settings
- Disables user of Add/Remove and installation of software

When users are offsite or use their laptop at home i am wanting the above settings to be turned off or to not apply since the laptop isnt connected to the network, so basically is there a way that these settings can be turned off when the user logs in on their laptop at home???

Question by:2bitpanther
    LVL 15

    Accepted Solution

    GPO that are applied are cached to the local machine & I don't think they can be taken off unless it took off the GPO & the machine logs back onto the domain. I'd recomend apllying these settings with a log on script & then apply a log off script to undo the settings. Several log on scripts can edit the registry such as kixstart program.
    LVL 2

    Assisted Solution

    A simpler solution(as long as the GPOs are set in the user config, not computer) is just to get users to log on with a local profile instead of a domain profile when they go home. Local profile will be unaffected by said GPOs. That being said, you could create a home profile in a separate OU that is affected by different or less GPOs. I'm going for simple ideas first here.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
    I'm a big fan of Windows' offline folder caching and have used it on my laptops for over a decade.  One thing I don't like about it, however, is how difficult Microsoft has made it for the cache to be moved out of the Windows folder.  Here's how to …
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now