CODEWITHSUNDEEP
windowsactive-directoryadministrationgpo
MrMarvel
MrMarvel

Reputation: 42

How to apply group policy(GPO) to non-domain users on domain computers?

I have domain controller and domain computer. On domain computer I have several domain users and one local user. I want to apply specific restrictions (user policy) to local(non-domain) users on domain computer. Currently I can only apply user policy only to domain users. Is it possible?

I tried to add to security filter whole domain computer. It didn't apply to non-domain user.

EDIT: I know that domain polices doesn't apply to local users. So I want to find workarounds

Upvotes: -1

Views: 851

Answers (2)

Derepas Benjamin
Derepas Benjamin

Reputation: 1

Computer comfiguration will apply settings on computer itself, even so session isn't connected with a domain session .

You can create computer configuration settings in your GPO on the OU containing domain computer. Otherwise you should us loopback configuration

Upvotes: 0

ErkinD39
ErkinD39

Reputation: 388

You can only apply local policy to local users. Domain group policy applies to domain users and domain computers. Please note that computer policy part of the domain group policy applies to the computer, hence all users logging on to this computer (including local users) are effected from this computer part of domain group policy.

For example : A domain password policy defined in computer policy part of domain gpo will effect local users also.

If the same settings exist both in local policy and domain group policy then domain group policy overwrites.

Upvotes: 1

Related Questions