I would just remove the one setting from Default Domain Policy that is causing problems and then have the targeted GPOs as you describe just for that setting.
Printable View
I would just remove the one setting from Default Domain Policy that is causing problems and then have the targeted GPOs as you describe just for that setting.
just had a thought.
disable user portion of default domain policy for everyone
copy default domain policy and just enable user settings but tag it with a not win8 wmi
that SHOULD to my mind work all the important stuff in ddp is pc there is naff all in user section apart from some old ris stuff 08 cant see the proxy and some odds and ends that hide ie first run etc
opinions please
It's not something I've done, but personally I'd leave the Default Domain Policy alone but link another a GPO in the same place.