I am a bit confused over local policy ;-) There are Local policy settings in each group policy say the default domain policy and you can also add a MMC snap in for group policy for the local computer on a DC, Can someone clarify this EG Scope. Also: If I set in the default domain computer policy a setting for say "Audit logon events" under "local policy" by editing (Computers/Windows/security/local olicies/audit policy/) Will this apply to all computers in the Domain? Super Play

Found the answer: Taken from the 2003 Server pocket consultant P211 You assign user rights though the local group policies node of group policy. As the name implies, local policies pertain to a local computer. However you can configure local policies and then import them into active directory. You can also configure these local polices as part of an existing policy for a site, domain or organisational unit, When you do this the local policies apply to the computer accounts in the site, domain or organisational unit. Super Play

I think you might be a bit confused there SuperPlay. Local Policies apply to the local machine, obviously, and are used when no group policies are used. If you apply group policy via a domain, the local policies that you have applied at the pc level will be applied first, followed by site, then domain, then OU policies. Local policies will be overwritten by site, domain, or OU policies if there is a conflict. So, if the local policy says to remove the Run command from the start menu, and the domain policy says to put it back, it will be put back in and the local policy will be overwritten and essentially ignored. So to say that "the local policies apply to the computer accounts in the site, domain or organisational unit" is not necessarily true. If depends what group policies are set to do. Glen