• If Group Policy Settings Apply Inconsistently
    		•

    Table 2. How Policy is Applied on the Client Computer




    Download 296 Kb.
    bet35/50
    Sana22.07.2021
    Hajmi296 Kb.
    #15617
    1   ...   31   32   33   34   35   36   37   38   ...   50

    Table 2. How Policy is Applied on the Client Computer


    Backend

    Account Object Location

    What Affects the Client

    Windows NT 4.0

    Computer: Windows NT 4.0

    At computer startup: Computer local Group Policy (only if changed).
    Every time the user logs on: Computer System Policy.

    “

    Computer refresh

    Before Control-Alt-Delete: Computer local Group Policy only.
    After the user logs on: Computer local Group Policy and computer System Policy.

    “

    User: Windows NT 4.0

    When the user logs on: User System Policy.
    If local Group Policy changes: User local Group Policy and user System Policy.

    “

    User refresh

    User local Group Policy and user System Policy.

    Mixed (migration)

    Computer: Windows NT 4.0

    At computer startup: Computer local Group Policy (only if changed).
    Every time the user logs on: Computer System Policy.




    Computer refresh

    Before Control-Alt-Delete: Computer local Group Policy only.
    After the user logs on: Computer local Group Policy and computer System Policy.




    User: Windows 2000 later.

    When the user logs on: Group Policy is processed after computer System Policy.




    User refresh

    User Group Policy.

    Mixed (migration)

    Computer: Windows 2000 or later

    During system startup: Group Policy.




    Computer refresh

    Computer Group Policy




    User: Windows NT 4.0

    When the user logs on: User System Policy.
    If local Group Policy changes: User local Group Policy and user System Policy.




    User refresh

    User local Group Policy and user System Policy.

    Windows 2000 or later

    Computer: Windows 2000 or later

    During computer startup and when the user logs on: Group Policy.




    User: Windows 2000 or later




    Windows 2000 or later in a workgroup (without Active Directory)

    Local

    Local Group Policy only.


    If Group Policy Settings Apply Inconsistently


    Check for:

    • Preferences versus policies.

    • Asynchronous processing.

    Are you using IPSec or User Rights policies?

    Preferences Versus Policies


    Registry policy or Administrative Templates take the form of policies (registry entries under the special keys) or preferences (registry keys anywhere else). Administrative Templates files are used to apply policies or preferences.

    It is recommended to use policies rather than preferences:



    • Policies don’t “tattoo.” Using a GPO to deploy policies and preferences, when the GPO is removed, the policies will be removed, but the preferences will remain. This process is known as “tattooing.”

    • Preferences do not get refreshed unless the GPO changes. Users can change their preferences, and they will not be restored until Group Policy changes and the GPOs are reapplied. Policies on the other hand are ACL’d in the registry, so that users cannot change them.

    If you must use preferences, preferences must be added via the .adm file. By default, if nothing changes at the GPO, nothing gets applied to the client computer (assuming the client has received policy in the past).

    Note: Policies are stored under HKLM (for computer policy) or HKCU (for user policy).

    \Software\Policies (preferred location)

    \Software\Microsoft\Windows\CurrentVersion\Policies




    Download 296 Kb.
    1   ...   31   32   33   34   35   36   37   38   ...   50




    Download 296 Kb.
    Bosh sahifa
    Aloqalar
        Bosh sahifa
    Dərs
    Mühazirə
    Qaydalar
    Referat
    Xülasə
    Yazı


    Table 2. How Policy is Applied on the Client Computer

    Download 296 Kb.