Managing Local Group Policies
As discussed in the section "GPO Types" in Chapter 2, Windows Vista, Windows Server 2008, and later versions of Windows allow the use of multiple Local Group Policy objects (LGPOs) on a single computer (as long as the computer is not a domain controller). Previously, computers had only one LGPO.
When computers are being used in a stand-alone configuration rather than a domain configuration, you may find that multiple LGPOs are useful because you no longer have to explicitly disable or remove settings that interfere with your ability to manage a computer before performing administrator tasks. Instead, you can implement one LGPO for administrators and another LGPO for nonadministrators.
When computers are being used in ...
Get Windows® Group Policy Administrators Pocket Consultant now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
