Learned something new today. There's Active Directory Group Policies Objects (GPOs) and Local Group Policies. Starting with Vista, there is now something called Multiple Local Group Policy Objects (MLGPOs). Here's a quick summary of how these work:
Level 1: Affects everyone
Level 2A: Affects the person if they're a Joe User
Level 2B: Affects the person if they're a local Admin
Level 3: Affects a specific person based on username
With AD GPO's available, I'm not sure why LGPOs are needed. However, I do like having granularity with MLGPOs. Hope I find it useful at some point.
Here's a blog post about it:
http://www.gpanswers.com/blog/140-gp-client-and-internals/695-why-local-gpos-matter.html
No comments:
Post a Comment