Dears, we have in our organization an applied domain group policy , which restricts all clients with some specific TCP/IP Addresses ( ex. 10.10.0.x ) to be member of our domain - in order to be able to resolve from our DNS while accessing the internet. my question is , how to disable this policy in some client PC ( even it has the same IP subnet ) .in order to be able to access the internet and resolve from the domain DNS servers. we need it to be done from the client side, ..not from the DC. thanks in advance Hatem Elantary

Hi, This function can not be achived if you don't use from the DC.Spencer TechNet Community Support

thanks you , yes I know, but can't we achieve it using some local security policy " IPsec " or by editing in the local group policy GPeditor " Name resolution Policy NRPT " under computer configurations\windows settings ? as I tried use these policies , but can't configure it or may be there is some thing missed or some how. so if you try it before , or know some idea about it, we can try again Regards, Hatem Elantary

Hi, Based on my knowledage, the PCs would be applied group policy once these PCs join into the domain. If you change the some local policies, it's also useless. To make sure that, i hope you can post this issue to Windows server forum for further help. Best RegardsSpencer TechNet Community Support