In Active Directory, each server and workstation must be a member of one (and only one) domain and be located in one (and only one) site. You can think of an Active Directory network as having four constituent and distinct levels that relate to Group Policy: The other strategy is centralized Group Policy administration, which works only in conjunction with Active Directory on. Each policy you create gets its own folder, named with the security ID (SID) of the corresponding user object.
Local Group Policy is stored in the “%windir%\system32\grouppolicy directory (usually, C:\windows\system32\grouppolicy). Local Group Policy supports multiple local GPOs (MLGPOs), which enables you to decide which users get what options at the local level for example, you can assign regular users one set of settings and administrators another set, or you can give one specific user a particular combination of settings. The most expeditious way to edit the Local Group Policy on a machine is to click the “Start” button and run the command “GPEDIT.MSC” to start the Local Computer Policy Editor.
0 kommentar(er)
