Re: Question: GPOs and laptops

circa Mon, 13 Sep 2004 14:09:01 -0700, in
microsoft.public.cert.exam.mcse, =?Utf-8?B?Um9iZXJ0bw==?=
() said,
>
> GPO Question:
>
> You have a laptop that is in a OU in your domain. You've linked a GPO to
> that OU. What happens when the laptop is booted while disconnected from the
> network? I've always assumed that the laptop would use the LGPO under this
> condition. However, some example 70-270 questions I've read seem to suggest
> that the GPO of the OU is enforced even while disconnected (as though
> cached).

Basically, it is. Otherwise, there wouldn’t be much point in Group
Policy, as a user could bypass it simply by disconnecting his/her
machine from the network.

Until the laptop has been “told” that the group policy settings no
longer apply to it, whether it’s because the policy has been unlinked
from the OU or because the computer has been removed from the OU, the
client continues to leave the settings in their applied state
(remember, it is actually extensions on the *client* that implement
policy settings). Obviously, some things don’t work/apply when a
machine is not connected to the domain, but that doesn’t mean that
the client simply discards its previous group policy settings because
it’s disconnected.

>
> Comments and links to MS articles appreciated. Thanks!
The first section of this ResKit chapter may prove helpful to you:

http://www.microsoft.com/windows2000...mplechapters/d
sec/DSEC_POL.doc

It can be obtained here if you don’t feel like fixing the link above:
http://tinyurl.com/4p3rp

Also:

http://tinyurl.com/7xd7p

Laura
--
Experience is the name every one gives to their mistakes.
-Oscar Wilde

Laura A. Robinson