Anybody here knows why my local C drive still showing up to the user even I enabled Hiding C drives at GPO. I checked the registry and it showed the value 0x0000004(4).
I'm not sure perhaps there is a local policy setup by previous administrator. I have a script that would delete items in the registry. Is it conflicting to the GPO I made? How could I disabled higher domain policy? I checked block inheritance as well as no override.
By the way, do you have idea how to stop yahoo messenger popping up during startup using GPO?
To stop higher domain GPOs u need to make sure any in an above container has not got "block policy inheritence", otherwise you have it right.
Can't help on the Yahoo Messenger thing other than moving it out of the registry and startup (use MSCONFIG), then the user would have to initiate it themselves.
Thanks guys, I really appreciate your help. @bran Yes, I used loopback processing on the OU.
Is it ideal I used block inheritance for the OU group policy only? I have 10 OU's in which each policy has unique configuration to each other security pol. How can I disable Local Policy? Previous admin had set local security on each machine which is very tedious keep repeating the setup.
Also, I disabled link for the domain default policy.
That's a good question as far as how to prevent local policies... if your AD is working correctly you shouldn't have to worry about it (as long as you have a policy that fixes/changes what the Local Policy does)- because last policy wins... in this case the OU policy will take higher precedence.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.