Preventing processing of local Group Policy

by Mitch Tulloch [Published on 28 Jan. 2009 / Last Updated on 14 Nov. 2008]

In Windows Vista and later you can prevent the processing of local Group Policy by configuring—guess what—a Group Policy setting!

In Windows Vista and later you can prevent the processing of local Group Policy by configuring the following Group Policy setting:

Computer Configuration\Policies\Administrative Templates\System\Group Policy\Turn Off Local Group Policy Object Processing

When this policy is enabled, Group Policy processing will follow SDOU (site-domain-OU) instead of LSDOU (LGPO-site-domain-OU).

Note: Don't enable this policy within an LGPO on a standalone computer (belonging to a workgroup) as it won't be honored.

The Author — Mitch Tulloch

Mitch Tulloch is a widely recognized expert on Windows administration, networking, and security. He has been repeatedly awarded Most Valuable Professional (MVP) status by Microsoft for his outstanding contributions in supporting users who deploy and use Microsoft platforms, products and solutions. Mitch has published over two hundred articles on different IT websites and magazines, and he has written or contributed to almost two dozen books and is lead author for the Windows 7 Resource Kit from Microsoft Press. For more information, see www.mtit.com .

Latest Contributions

Featured Links