General discussion


Disable Domain Policy Locally

By wwnexc ·
Hi everybody,

I want to disable the domain group policies on my computer locally.

What's going on:
-I want to disable the domain policies on my computer
-I have local admin rights.
-I can't modify anything on the domain controller


This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by CG IT In reply to Disable Domain Policy Loc ...

well here's the deal. Policy is applied local site domain and OU in that order. If your computer is a member of a domain and you log on to the domain, you get the domain policy unless there is a block policy inheritance. but to do that you have to be a domain or enterprise admin.

If you log on locally using the local computer admin account, you can change whatever security policy you want and it will apply. However, the minute you log on to the domain, the local policy is overriden by domain unless as I said there is a block policy inheritance.

Collapse -

That's what you think

by joshudson In reply to

Log in locally, set policies to what you want, start regedit, find the policy keys in HKLM and HKCU, set there security permissions to allow read all/deny write all.

Hot tip: this can be done (with a few extra steps) to a non-admin account if roaming profiles are enabled.

Related Discussions

Related Forums