Question on Local Security Policy

Archived from groups: microsoft.public.win2000.security (More info?)

Hi there,

I have a Windows XP Pro workstation that belongs to a Win 2K domain.
When I access the Local Security Policy on the computer, I find that Policy
objects like 'Account Policies' and 'Audit Policies' are 'greyed out' as in
non-configurable.

Is there any way I can enable these policies at the local workstation, while
it is a member of a domain.

Thanks in advance for any replies.

Regards

CP

Archived from groups: microsoft.public.win2000.security (More info?)

Thank you for ur response, Drumgod.

How do I prevent the domain level group policy from overriding the Local
Security Policy.

Regards

CP

"Drumgod" wrote:

> If thoses options are greyed out that means they are being controlled at the
> domain level by group policy. You will not be able to changes these options..
>
> "CP" wrote:
>
> > Hi there,
> >
> > I have a Windows XP Pro workstation that belongs to a Win 2K domain.
> > When I access the Local Security Policy on the computer, I find that Policy
> > objects like 'Account Policies' and 'Audit Policies' are 'greyed out' as in
> > non-configurable.
> >
> > Is there any way I can enable these policies at the local workstation, while
> > it is a member of a domain.
> >
> > Thanks in advance for any replies.
> >
> > Regards
> >
> > CP
> >
> >

Archived from groups: microsoft.public.win2000.security (More info?)

Actually, to free account policies from being impacted by GPOs
from the forest you need to make sure that the Account policies
are "Not Defined" in any OU-linked GPOs that have the machine
within their scope of influence. Only then will they be available
to be set at the level of the Local Security Policy.

The Account policies set in GPOs linked to the domain are not
involved here, as those affect only domain accounts and have
their impact upon the DCs.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"CP" <CP@discussions.microsoft.com> wrote in message
news:8CC4981F-1C45-4759-9377-B7BC2C7A8237@microsoft.com...
> Thank you for ur response, Drumgod.
>
> How do I prevent the domain level group policy from overriding the Local
> Security Policy.
>
> Regards
>
> CP
>
> "Drumgod" wrote:
>
> > If thoses options are greyed out that means they are being controlled at
the
> > domain level by group policy. You will not be able to changes these
options..
> >
> > "CP" wrote:
> >
> > > Hi there,
> > >
> > > I have a Windows XP Pro workstation that belongs to a Win 2K domain.
> > > When I access the Local Security Policy on the computer, I find that
Policy
> > > objects like 'Account Policies' and 'Audit Policies' are 'greyed out'
as in
> > > non-configurable.
> > >
> > > Is there any way I can enable these policies at the local workstation,
while
> > > it is a member of a domain.
> > >
> > > Thanks in advance for any replies.
> > >
> > > Regards
> > >
> > > CP
> > >
> > >