Control local users using domain group policy

i new group policy.

i have lab of 50 computers part of domain. reason, want control local guest account on lab computers using domain group policy , want students use local guest account use these computers.

my questions are:
1-if these computers part of domain, can log on them locally , still effect of domain group policy or have log on domain effect of group policy on these computers.
2-i used group policy management editor->computer configuration->preferences->windows settings->control panel settings->right-click on right panel->new local user->action:update, turn off: user must change password @ next log on , account disabled. however, when try log on locally guest account still disabled. how knew? log on locally admin , found out guest still disabled.
3-there small yellow triangle on guest user name in group policy management editor. why??
4-how can enforce group policy pushed after make changes?

thank you

still open topic 2:
a quick test showed me same. preference item did not change guest account.
but can original policy:
configuration=>policies=>windows settings=>security settings=>local policies=>security options
search for “accounts: guest account status” end enable it.

note:
if policy , preference settings overlap, far i recommended use real policy settings.

---

patrick

Windows Server  >  Group Policy