Local Group Policies - Best Practice

Posted on 2012-09-03
Medium Priority
Last Modified: 2012-09-04
Hi there,

Can anyone help me with "Best Practice" for setting policies in the following areas on laptops within a domain. Bearing in mind they may be used outside the domain I want Domain policy to override Local when inside the network but obviously the Firewall needs to be turned on when used outside the Domain. Areas of concern:

Windows Firewall and Advanced Security
Network List Manager Policy
Public Key Policies
Software Restriction Policies
Application Control Policies
Advanced Audit Policy Configuration

Phew,! quite a list but any help would be appreciated.
LVL 74

Accepted Solution

Jeffrey Kane - TechSoEasy earned 2000 total points
ID: 38362142
First I'm not sure if you are aware that Windows Firewall has TWO automatic settings, Domain and Standard.  Domain applies when the computer is attached to the domain network, and the Standard profile will be applied otherwise -- when the computer is elsewhere.
The firewall should always be on, whether inside or outside.

There is a good guide for this here:

But it looks like you may want to first get a better overview of AD security, so take some time to read through this great article:


Author Closing Comment

ID: 38362729
Thanks old chap , thats just the sort of help I was looking for.

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
By default Outlook 2016 displays only one time zone in the Calendar. The following article explains how to display two time zones in one calendar view.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decadeā€¦
Suggested Courses

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question