Local Security Policy overview

Security policy ia a combination of security settings that affect the security on a computer. You can use Local Security Policy to edit account policies and local policies on your local computer

With Local Security Policy, you can control:

How policy is applied to a computer that is joined to a domain

If your local computer is joined to a domain, you are subject to obtaining security policy from the domain's policy or from the policy of any organizational unit that you are a member of. If you are getting policy from more than one source, then any conflicts are resolved in this order of precedence, from highest to lowest:

When you modify the security settings on your local computer using Local security policy, then you are directly modifying the settings on your computer, therefore, the settings take effect immediately, but this may only be temporary. The settings will actually remain in effect on your local computer until the next refresh of Group Policy security settings, when the security settings that are received from Group Policy will override your local settings wherever there are conflicts. The security settings are refreshed every 90 minutes on a workstation or server and every 5 minutes on a domain controller. The settings are also refreshed every 16 hours, whether or not there are any changes.

Local computer security for file system, registry, system services

Security setting descriptions

Top of page