Solved

blocking group policy locally?

Posted on 2014-09-17
6
177 Views
Last Modified: 2014-09-24
Hello I'm wondering if there is a way   to block group policy locally..I've tried adding filters and to block the computer over domain. But it still is holding onto the lock out media policy I have in place.
0
Comment
Question by:M B
6 Comments
 

Author Comment

by:M B
ID: 40328660
I have done a gpupdate  /force and restarted
0
 
LVL 6

Expert Comment

by:jacobstewart
ID: 40328825
How is the lock put policy applied?  im assuming its a computer based policy but is it enforced at the domain level or OU level?  If its domain level you will never get around it unless its removed.  

We run OU based policies makes for much easier testing and removal.
0
 

Author Comment

by:M B
ID: 40328887
OU .. the policy has been deleted ..yes computer configuration
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 6

Expert Comment

by:jacobstewart
ID: 40328909
Did you unlink the policy before deleting it?  What were the actions set to on the policy for when the policy was removed? Such as revert or leaves settings as applied?  My guess is that the policy was set to leave the settings rather than revert and was not unlinked prior to removal.

You may be stuck manually changing the settings on your machine that were applied by the policy if it was not removed and defined correctly.  

I would say move your computer to an OU that the policy is not applied to but since the policy has been deleted thats not going to work for you.
0
 
LVL 9

Expert Comment

by:nattygreg
ID: 40329544
Only can change at the domain level, since the domain policy overrides everything
0
 
LVL 23

Accepted Solution

by:
rhandels earned 500 total points
ID: 40329728
Maybe i'm misinterpreting the question but do you want to block the local policy a user can set by opening the gpedit.msc?? If so, there is no real way to block this policy because the last policy that will be applied is the local policy on a machine. You could block the gpedit.msc off course.

If you mean that you set a policy and want it to be removed than that's a hole different story.
The problem is that some policies are being tattooed into the registry. This means that, if you for example set a policy to be enabled and remove it afterwards (or choose not configured) the setting will not be changed because the policy effectively changed the registry setting. The only option to change the setting is to attach a policy and choose disabled (if the prior selection was enabled). Or try to find the registry setting and import it using a GPO with a preference setting for registry settings.
0

Featured Post

Why spend so long doing email signature updates?

Do you spend loads of your time carrying out email signature updates? Not very interesting are they? Don’t let signature updates get you down. Let Exclaimer Cloud - Signatures for Office 365 make managing email signatures a breeze.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now