When this option is disabled, the local DeviceLock Service settings are in effect. When this option is enabled, the effective settings are determined by Group Policy or DeviceLock Enterprise Server policy depending upon the Policy Source(s) setting.

If the computer is configured to work with Group Policy, the Use Group/Server Policy option allows you to choose either Group Policy or Local Policy mode for the DeviceLock Service. Enable this option to choose Group Policy mode. Settings configured using DeviceLock Management Console or DeviceLock Enterprise Manager will be replaced with Group Policy settings. Disable this option to choose Local Policy mode. Settings configured using DeviceLock Management Console or DeviceLock Enterprise Manager will take precedence over Group Policy settings and replace them.

If the computer is configured to work with DeviceLock Enterprise Server policy (see DeviceLock Enterprise Server Policies), the Use Group/Server Policy option allows you to choose either Server Policy or Local Policy mode for the DeviceLock Service. Enable this option to choose Server Policy mode. Settings configured using DeviceLock Management Console or DeviceLock Enterprise Manager will be replaced with server policy settings. Disable this option to choose Local Policy mode. Settings configured using DeviceLock Management Console or DeviceLock Enterprise Manager will take precedence over server policy settings and replace them.

If the computer is not configured to work with Group Policy or DeviceLock Enterprise Server policy, the Use Group/Server Policy option is disabled and cannot be changed.

If the Use Group/Server Policy option is enabled and cannot be changed, it means that the Group Policy or Server Policy mode is enforced by enabling the Override Local Policy option in DeviceLock Group Policy Manager or in the DeviceLock Enterprise Server policy. A description of this option see in the Using DeviceLock Group Policy Manager section.

When the Use Group/Server Policy option is enabled, any local DeviceLock Service settings made using the DeviceLock Management Console will be overwritten with the settings received from outside after a while. Depending on the Policy Source(s) option, the settings may come from a Group Policy Object (GPO) or from the DeviceLock Enterprise Server. It is not possible to use local and external settings at the same time.

Thus, group/server policy and local policy cannot be concurrently applied to the same computer. However, if you want one of the computers to use local settings while the other computers get their settings from the GPO or from the server, you can disable the Use Group/ Server Policy option for that specific computer. As a result, the computer will no longer receive its settings from an external source and the local policy will be applied.

If the computer is in the scope of a GPO or has a server policy object applied to it, the console may not allow you to disable the Use Group/Server Policy option: the option is enabled and cannot be changed. This is usually caused by the Override Local Policy parameter setting in the policy object (see Using DeviceLock Group Policy Manager). Disable this parameter in the policy object, or remove the computer from the scope of the GPO or from the server policy object. In the case of a GPO, you can move the computer to a different OU in the Active Directory domain where this GPO is not applied. In the case of server policy, follow the instructions in Changing the Policy Object for a Client Computer.