Windows Vista

How to disable Local GPO processing in Windows Vista?

How to disable Local GPO processing in Windows Vista?

Windows Vista has the ability to create multiple local group policies (GPOs). This means that whenever you want to configure different settings for different users you can do so easily .

You can read more about LGPOs on my Understanding Multiple Local GPOs in Windows Vista and Configure Multiple Local GPOs in Windows Vista articles.

However, in some scenarios, when the Vista computer is a part of an Active Directory domain, the domain administrators might want to configure the workstations not to process any LGPOs at all. This might be useful when the Vista users might also be local administrators for their workstations (although this scenario should be less used as with Windows 2000/XP computers, mostly due to the new security and virtualization capabilities of Vista). In these scenarios, the domain admin might fear that since the users are local administrators of their own machines, they might start messing with LGPOs and make changes to the security or registry settings of their machines.

Sponsored Content

What is “Inside Microsoft Teams”?

“Inside Microsoft Teams” is a webcast series, now in Season 4 for IT pros hosted by Microsoft Product Manager, Stephen Rose. Stephen & his guests comprised of customers, partners, and real-world experts share best practices of planning, deploying, adopting, managing, and securing Teams. You can watch any episode at your convenience, find resources, blogs, reviews of accessories certified for Teams, bonus clips, and information regarding upcoming live broadcasts. Our next episode, “Polaris Inc., and Microsoft Teams- Reinventing how we work and play” will be airing on Oct. 28th from 10-11am PST.

In order to disable Local Group Policies processing perform the following steps:

  1. Open GPMC (Group Policy Management Console) from a Vista computer by typing Gpmc.msc in the Run command.

  2. In the GPMC window browse to find a GPO that is linked to the OU in which the Vista computers are located. If no such GPO exists, you can create one and link it to the OU or to the domain level, all depending on your AD configuration.

  3. Edit the selected GPO by right-clicking it and selecting Edit.

  4. In the GPO Editor window, scroll down to Computer Configuration > Administrative Templates > System > Group Policy.

  1. In the right pane scroll and select the "Turn off Local Group Policy objects processing". Double-click it (or right-click and select Properties). This setting can be enabled or disabled. Read the explanation, and if you want to disable LGPO processing – enable it.

  2. Close the GPO Editor.

  3. Reboot the Vista computers in order for the setting to take effect.

Related articles

You may also want to read:

Related Topics:

External Sharing and Guest User Access in Microsoft 365 and Teams

This eBook will dive into policy considerations you need to make when creating and managing guest user access to your Teams network, as well as the different layers of guest access and the common challenges that accompany a more complicated Microsoft 365 infrastructure.

You will learn:

  • Who should be allowed to be invited as a guest?
  • What type of guests should be able to access files in SharePoint and OneDrive?
  • How should guests be offboarded?
  • How should you determine who has access to sensitive information in your environment?

Sponsored by:

 
Live Webinar: Active Directory Security: What Needs Immediate Priority!Live on Tuesday, October 12th at 1 PM ET

Attacks on Active Directory are at an all-time high. Companies that are not taking heed are being punished, both monetarily and with loss of production.

In this webinar, you will learn:

  • How to prioritize vulnerability management
  • What attackers are leveraging to breach organizations
  • Where Active Directory security needs immediate attention
  • Overall strategy to secure your environment and keep it secured

Sponsored by: