mailing list archives
Fwd: Windoze GPO Question
From: Robert McIntyre <1tgeye () surewest net>
Date: Wed, 19 Nov 2008 08:42:32 -0800 (PST)
GPOs settings are configured in the computers registry. So once the GPO is applied, it will remain in place unless the
registry settings are changed. The settings you have applied would change the DNS settings from automatic to a manual
list. The DNS settings are a "computer configuration" setting and not a user setting so it is applied to the computer
regardless of what account you log on with.
--- Begin Message ---
From: Jon Kibler <Jon.Kibler () aset com>
Date: Mon, 10 Nov 2008 15:24:48 -0500
-----BEGIN PGP SIGNED MESSAGE-----
This may be slightly off topic, but I have a question about GPO scope.
I have a client that has a bunch of sales people who have laptops. When
they come into their office, they login to the domain. When they are on
the road, they login to 'this computer.'
The problem that the client is seeing has left me scratching my head
about how GP works. What is happening is the client has recently set
some new group policies that do things like specify which name servers
and other network resources a given OU is to use. Now, when these
laptops are taken on the road and the user tries to get Internet access,
it fails. Why? Because the GPO settings are overriding the DHCP settings
on 'this computer'.
What I don't understand is why DOMAIN OU GPOs are being applied outside
the scope of the domain. If you are not logging into the domain, why are
the domain GPOs in effect? This doesn't make sense. Has my client
somehow misconfigured AD?
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC USA
My PGP Fingerprint is:
BAA2 1F2C 5543 5D25 4636 A392 515C 5045 CF39 4253
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
Filtered by: TRUSTEM.COM's Email Filtering Service
No Spam. No Viruses. Just Good Clean Email.
--- End Message ---
- RE: Windoze GPO Question, (continued)