The system regularly checks for computers that require a local Policy Application. When a computer first joins ForestSafe it is given a PENDING status, pending computers are computers that have a Local Policy application outstanding. This ForestSafe policy can be seen as similar in nature to Windows Group Policy, it runs in the background, and applies Policy constantly.
ForestSafe policy is also configured globally across the enterprise, and changes very rarely. However ForestSafe maintains a status internally, and does not apply policy to every computer every time.
Properties of Local Account Policy are set in the following global setting categories:
· Policy General Settings
· Policy Local UNIX Accounts
· Policy Local Windows Accounts