Question
Can both group- and local policy be simultaneously used to deploy DeviceLock Service settings to the controlled computers?
Answer
No, group- and local policy cannot be applied to one computer simultaneously. In case you need a computer to receive DeviceLock settings from local policy, while other computers still have group policy as the source, you can either move it to another Organizational Unit in the domain (different from the one DeviceLock GPO is assigned to), or disable "Use Group Policy" flag in the 'Service Settings'* when connected to the computer via DeviceLock Management Console. *Uncheck the 'Override local policy' flag to prevent forced use of Group Policy on this computer.