Re: GPUPDATE Will Not work when Disconnected from Network
Expected only on VISTA? It works fine on XP and Server 2003. I do not buy
the security argument here. If you have the capability to change the local
GP, then you have the ability to change the registry. If I edit the registry
manually, rather than having the GP do it for me, then I get the desired
change in system behavior. If thatâ€™s MS idea of security by inconvenience,
then I will simply use a different door. Now I see why administrators are
not adopting this software.
> Yes, this is expected behavior. If you are on a machine that is joined
> to an AD domain, then GP processing will not occur at all if you are not
> connected to the domain and a DC, in some way. Furthermore, if you try
> to effectively circumvent domain policy by modifying the local GPO, it
> is basically ignored by the system. That is, no local GP processing is
> done while you are disconnected from the domain. This is understandable,
> given that any user could simply unplug from the domain if they ever
> want to circumvent GP.
> 'Group Policy Tools and Information from GPOGUY.COM'