

Server type or GPOĭomain Controller Effective Default SettingsĬlient Computer Effective Default Settings Default values are also listed on the policy’s property page. The following table lists the actual and effective default policy values.
Windows 7 undock portable#
Assign this user right to only those accounts that are permitted to use the portable device.Ĭomputer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment Default valuesĪlthough this portable device scenario doesn't normally apply to servers, by default this setting is Administrators on domain controllers and on stand-alone servers.If this policy isn't assigned, the user may remove the portable device from its docking station without signing in, and then have the ability to start and sign in to the device afterwards in its undocked state.Ĭonstant: SeUndockPrivilege Possible values Otherwise, as a security measure, the user won't be able to sign in after the device is removed from the docking station. If this user right is assigned to the user’s account (or if the user is a member of the assigned group), the user must sign in before removing the portable device from its docking station. This policy setting only affects scenarios that involve a portable computer and its docking station. This security setting determines whether a user can undock a portable device from its docking station without logging on. Describes the best practices, location, values, policy management, and security considerations for the Remove computer from docking station security policy setting.
