No Override Local Policy

[aribot]

Is there any way to force the no override option in the local policy of a computer. I want that the users policies apply in a diferent way in only one computer in the domain.

Thanks.

 

[abrannon]

Go to your Domain Group policies, and add that PC to the security tab, and remove the balock for apply policy. It will not apply the group policy so it will not over rule the local policy.

 

[aribot]

Thanks for your quickly response but it doesn't work !
I've added the computer into the Domain GPO and I've denied the apply the GPO option to that computer.
Then I've created the new GPO and only apply it to that computer and all the users.
The only thing i have changed from the domain policy is the redirection folder that afects the user.That's because that computer is only used to surf the internet and I only want the explorer in the Start menu instead of all the programs the user has to work.

When a user log's on that computer it only have the explorer in the start menu, but when he does in another diferent computer he still has only the explorer.

Can I change the redirection folder of users depending on the computer where the user log in ?

Thanks.

 

[GrnEyedLdy]

"When a user log's on that computer it only have the explorer in the start menu,..."

This is because you applied the policy to that computer...

"...but when he does in another diferent computer he still has only the explorer."

This is because you applied the policy to "all the users". You see "all users" are affected by the policy no matter what machine they log onto.

"Then I've created the new GPO and only apply it to that computer and all the users."


You only need to apply the policy to the one computer that you want affected, then anyone who logs onto it will be subject to the policy.


Patty

 

[aribot]

It still doesn't work.
If I don't apply the GPO to the users they still load his default Start Menu instead of the only explorer application.

I think that's because the policy I want to apply only affects the users and not the computer. The "Redirection Folder" option is in the "user configuration" part of the GPO and if I apply the GPO only to one computer it only applies the "computer configuration" part.

Is that right ?