Top menu

Configuration - Using both Group- and Local Policy to deploy DeviceLock Service settings

QUESTION

Can both group- and local policy be simultaneously used to deploy DeviceLock Service settings to the controlled computers?

ANSWER

No, group- and local policy cannot be applied to one computer simultaneously.

In case you need a computer to receive DeviceLock settings from local policy, while other computers still have group policy as the source, you can either move it to another Organizational Unit in the domain (different from the one DeviceLock GPO is assigned to), or disable "Use Group Policy" flag in the 'Service Settings'* when connected to the computer via DeviceLock Management Console.

*Uncheck the 'Override local policy' flag to prevent forced use of Group Policy on this computer.