Does the "Turn off Local Group Policy objects processing" setting have any effect on Domain Controllers?
Posted on 2010-11-12
I have a GPO deployed at the top of my domain that enables the "Turn off Local Group Policy objects processing" setting. Through some troubleshooting of a problem, I discovered that I had some local policies configured on a Domain Controller that were causing the problem. However, it dawned on me: If I turned off local policy processing at the top of the domain, why were these settings taking effect at all?
I know the Default Domain Controllers Policy and a number of domain group policy settings are specific to DCs and can *only* be set in the Default Domain Controllers Policy - otherwise they will be ignored.
So my question is... does this setting take effect on DCs? And if it does, must it be set in the Default Domain Controllers Policy?