?
Solved

blocking group policy locally?

Posted on 2014-09-17
6
Medium Priority
?
183 Views
Last Modified: 2014-09-24
Hello I'm wondering if there is a way   to block group policy locally..I've tried adding filters and to block the computer over domain. But it still is holding onto the lock out media policy I have in place.
0
Comment
Question by:M B
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 

Author Comment

by:M B
ID: 40328660
I have done a gpupdate  /force and restarted
0
 
LVL 6

Expert Comment

by:jacobstewart
ID: 40328825
How is the lock put policy applied?  im assuming its a computer based policy but is it enforced at the domain level or OU level?  If its domain level you will never get around it unless its removed.  

We run OU based policies makes for much easier testing and removal.
0
 

Author Comment

by:M B
ID: 40328887
OU .. the policy has been deleted ..yes computer configuration
0
Does Your Cloud Backup Use Blockchain Technology?

Blockchain technology has already revolutionized finance thanks to Bitcoin. Now it's disrupting other areas, including the realm of data protection. Learn how blockchain is now being used to authenticate backup files and keep them safe from hackers.

 
LVL 6

Expert Comment

by:jacobstewart
ID: 40328909
Did you unlink the policy before deleting it?  What were the actions set to on the policy for when the policy was removed? Such as revert or leaves settings as applied?  My guess is that the policy was set to leave the settings rather than revert and was not unlinked prior to removal.

You may be stuck manually changing the settings on your machine that were applied by the policy if it was not removed and defined correctly.  

I would say move your computer to an OU that the policy is not applied to but since the policy has been deleted thats not going to work for you.
0
 
LVL 14

Expert Comment

by:Natty Greg
ID: 40329544
Only can change at the domain level, since the domain policy overrides everything
0
 
LVL 23

Accepted Solution

by:
rhandels earned 2000 total points
ID: 40329728
Maybe i'm misinterpreting the question but do you want to block the local policy a user can set by opening the gpedit.msc?? If so, there is no real way to block this policy because the last policy that will be applied is the local policy on a machine. You could block the gpedit.msc off course.

If you mean that you set a policy and want it to be removed than that's a hole different story.
The problem is that some policies are being tattooed into the registry. This means that, if you for example set a policy to be enabled and remove it afterwards (or choose not configured) the setting will not be changed because the policy effectively changed the registry setting. The only option to change the setting is to attach a policy and choose disabled (if the prior selection was enabled). Or try to find the registry setting and import it using a GPO with a preference setting for registry settings.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question