SYSTEM AND NETWORK ADMINISTRATION
AIM: SETTING UP OF LOCAL SECURITY POLICY.
Security policy is a combination of security settings that affect the security on a computer. Youcan use Local Security Policy to edit account policies and local policies on your local computer.With Local Security Policy, you can control:
Who accesses your computer.
What resources users are authorized to use on your computer.
Whether or not a user or group's actions are recorded in the event log.
How policy is applied to a computer that is joined to a domain :
If your local computer is joined to a domain , you are subject to obtaining security policy fromthe domain's policy or from the policy of any organizational unit that you are a member of. If you are getting policy from more than one source, then any conflicts are resolved in this order of precedence, from highest to lowest:
Organizational unit policy
Local computer policyWhen you modify the security settings on your local computer using
Local security policy
, thenyou are directly modifying the settings on your computer, therefore, the settings take effectimmediately, but this may only be temporary. The settings will actually remain in effect on your local computer until the next refresh of Group Policy security settings, when the security settingsthat are received from Group Policy will override your local settings wherever there areconflicts. The security settings are refreshed every 90 minutes on a workstation or server andevery 5 minutes on a domain controller. The settings are also refreshed every 16 hours, whether or not there are any changes.