Many of the users in our network bring home their laptops. Will GPOs still be enforced when they aren’t within our LAN?


GPO settings are cached along with the cached logon credentials.The only limitation is that the computers won’t receive GPO updates if they are disconnected from the LAN. Note, however, if you’re using Microsoft’s DirectAccess (which extends the LAN to the Internet) then, yes, they do get new and updated GPOs.