active directory - Does domain group policy affect machine and user if user logging locally? -
i have read if user logging on locally (with local user account) domain gpo not process. true?
a gpo has part computer , part user matches scope in security filtering of gpo , linked relevant ou. if computer connected domain, apply matching gpos no matter user logged in, local users.
hence, if computer part of domain , user not (e.g. local user), computer policies still applied , user policies not.
so if want not apply both policies, need use local user , remove computer domain (e.g. via local admin) , example put local workgroup instead.
the meaning of computer policies that: centrally administered settings specific machine cannot influenced user.
Comments
Post a Comment