What is the best for desktops ? Local policies or domain policies ?

Discussion in 'Active Directory' started by Pascal, Apr 13, 2007.

  1. Pascal

    Pascal Guest


    I would like to deploy some security settings on the desktops for
    security reason.

    For existing desktops, I should have to create a GPO on the domain for
    this security settings but do you think it would be a nice idea to
    apply those security settings in a security template during the
    installation of Windows XP ?

    Thank you
    Pascal, Apr 13, 2007
    1. Advertisements

  2. Hi Pascal

    This is the Active Directory newsgroup.
    There is microsoft.public.windows.group_policy newsgroup
    that is more focused on your issues.

    Basically, your question comes down to these:
    Will these machines always be in the domain?
    If so, then GPO will always govern and local policy would
    only be effective where a policy setting is not used in GPO.
    Are there any unique settings difficult to implement by GPO?
    GPO is not so good when one needs this value for that one
    machine, that value for those two, etc. all little nickle and
    dime stuff - but then that is not exactly aligned with your
    stated use of templates in the inital imaging either.

    Roger Abell [MVP], Apr 13, 2007
    1. Advertisements

  3. Pascal

    Jorge Silva Guest

    Hi Pascal

    If you've AD in place and these machines will be added to your AD domain,
    you will get better control over them and less admin work by configuring the
    GPOs a central location in AD.
    However before going and start to deploy GPOs at the domain or OU level, you
    should go to MS site and read some articles to understand how GPO works.

    I hope that the information above helps you.
    Have a Nice day.

    Jorge Silva
    MCSE, MVP Directory Services
    Jorge Silva, Apr 13, 2007
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.