Security templates applied locally vs applied through grou..

[Simon]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi There!
Would a security template applied locally on a computer (W2k,W2k3, Win XP) be
overriden by security settings (under computer configuration node)of the
group policy linked to the OU containing that
computer account?

Now if they are overwritten ,then what is the point of applying security
policies locally instead of using GPO as it is recommended by Microsoft for
very large security templates to prevent banadwidth issues that will arise
as group policies refresh.
Your help is greatly appreciated.

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Only settings that are also defined at the domain/OU level would override
Local Security Policy settings. Security templates can be imported into a
GPO however it is recommended to not use large templates such as the
security setup.inf template or others that have a lot of settings for file
system/registry as that can cause network lag and replication latency. Most
of the time you can achieve what you need with simple security templates
that do NOT include a lot of settings for file system/registry. I would not
recommend ever configuring file system/registry at the domain level. ---
Steve


"Simon" <Simon@discussions.microsoft.com> wrote in message
news:1ED60960-4E8E-46B0-94C9-915AF3B1EC67@microsoft.com...
> Hi There!
> Would a security template applied locally on a computer (W2k,W2k3, Win XP)
> be
> overriden by security settings (under computer configuration node)of the
> group policy linked to the OU containing that
> computer account?
>
> Now if they are overwritten ,then what is the point of applying security
> policies locally instead of using GPO as it is recommended by Microsoft
> for
> very large security templates to prevent banadwidth issues that will
> arise
> as group policies refresh.
> Your help is greatly appreciated.