Computer configuration Vs User configuration

rjbarlow

Hi all,

I know that this is not an argument covered in 70-270 but...

I have tried some scenario and my impression is that User configuration has effect just as local policy and never via AD, while Computer configuration has effect via AD of course.
Is this right?

Thanks

Mishra

Nope.

Local policy is applied to the local workstation.
Group policy is applied in a domain environment.

User configuration is applied to the USER session
Computer configuration is applied to the entire computer thus effecting every user.

Thats a tiny breakdown of the topics.

snadam

rjbarlow wrote:

Hi all,

I know that this is not an argument covered in 70-270 but...

I have tried some scenario and my impression is that User configuration has effect just as local policy and never via AD, while Computer configuration has effect via AD of course.
Is this right?

Thanks

what mishra said. And I think i remember that computer/user configuration is a covered topic in 270. I dont remember off the top of my head though.

rjbarlow

snadam wrote:

what mishra said. And I think i remember that computer/user configuration is a covered topic in 270. I dont remember off the top of my head though.

I think it's covered Local GPO at all, not use of GPO via AD. I think this would be over the title of the exam.

snadam

rjbarlow wrote:

I think it's covered Local GPO at all, not use of GPO via AD. I think this would be over the title of the exam.

Correct. the point I was trying to make was that user/computer config IS apart of of this exam. However its a moot point since it was already known. I did not clearly read your original question, sorry!



see what happens when I try and help?

rjbarlow

snadam wrote:

rjbarlow wrote:

I think it's covered Local GPO at all, not use of GPO via AD. I think this would be over the title of the exam.

Correct. the point I was trying to make was that user/computer config IS apart of of this exam. However its a moot point since it was already known. I did not clearly read your original question, sorry!


see what happens when I try and help?

Oh no problem man, I found in my books for 70-270 just that Computer config. overrides User configuration on settings not matching and nothing other.
I think ther's not more other to say on that because just Local GPOs are covered.

rjbarlow

Mishra wrote:

Nope.

Local policy is applied to the local workstation.
Group policy is applied in a domain environment.

User configuration is applied to the USER session
Computer configuration is applied to the entire computer thus effecting every user.

Thats a tiny breakdown of the topics.

Mishra, that is what I believed and believe even now and what I learned so far, but I am trying to make some change appliyng some GPO via AD in User configuration node and I assure to You and all, those are completely ignored, I am performing logons by means of Domain accounts of course.
I am unbelieving.

I'm using virtual machines, and tried to:
- Remove the Recycle bin icon

---

> that is still there.
- Remove some option of CTRL+ALT+CANC like Block Disconnet and Lock computer options ----> are all still avalaible.

Policies in the Computer configuration node instead are all apllied.

Maybe ther's some error in some way on my virtual machines, I have disconnected and reconnected that to the domain dozen or more times.

I will try later.

Mishra

Try a gpupdate /force then an update on the client machines receiving the policy then reboot.

Use gpresult and make sure the policy with those settings are actually applying to the client machines.

Make sure your GPO is actually enabled.

Make sure your computer/user account is in the OU that the policy is applied to.

sprkymrk

rj - Make sure you make your GPO with user setting in OUs that have USERS. Its a common mistake.

If you create a GPO that modifies user settings, but the thing in the OU you are linked to is computers, nothing will happen.

rjbarlow

sprkymrk wrote:

rj - Make sure you make your GPO with user setting in OUs that have USERS. Its a common mistake.

If you create a GPO that modifies user settings, but the thing in the OU you are linked to is computers, nothing will happen.

Wow, that was the issue. I'm surprised how policies work, but is right anyway if I think now .That's great.

Thanks men all.