|
Command.exe
Hi
I work in a School (with over 300pc) where i find it challenging to keep
security of the network.
I have disabled the cmd.exe in group policy for students which works fine.
But they have find that creating a batch file and using command.exe, gives
them a dos prompt as good as a xp prompt to cause mischieve.
Any ideas on stopping the command.exe from working in GP or what ever.
(please...
|
2 |
24.05.2007 10:42:11 |
|
Missing Administrative Template Options
Hi everyone,
I want to set a GP to force a screen saver password on all our workstations
after 15 min. I'm running a 2k3 server with sp2 and all XPsp2 workstations. I
have some experience with group policy (this is just the latest addition to
several policies I've set up), bu I'm having trouble with this one because I
can't see the Control Panel administrative template option. In fact, ...
|
3 |
24.05.2007 09:53:02 |
|
Add a computer to the domain
I just learned that one of our uses was allowed to add a computer to the
domain even though they are not an administrator. How can prevent this from
happening? I'm not sure what changed but I don't think they were able to do
this before.
Any ideas?
Thanks,
Jasper
...
|
11 |
23.05.2007 21:50:49 |
|
Tabbed Browsing diabled
Somehow I disabled tabbed browsing? ideas?
...
|
3 |
23.05.2007 15:52:11 |
|
Read Only Access to OS Partition
hi, i want to create a user under windows xp sp2, who will have only
read access to the partition on which the os has been installed. this
user should be able to run applications and also save files both
created as well as downloaded from the internet to another partition.
please help. thanks
...
|
3 |
23.05.2007 15:45:46 |
|
Maximum Password Age
Hi
I am having some problems finding the GPO that enforces the Maximum Password
Age on my Server 2003.
I have been through all the GPO's but can't find any that has the Maximum
Password Age configured but the users are asked to change every 3 months.
Are there any way I can run a utility that can show me which GPO it comes
from?...
|
3 |
23.05.2007 15:45:20 |
|
Problems with folder redirection on Vista
We use the group policy to redirect the users Documents folder to
their home folder (\\server\home\%username%) and when a user logs on
from a Vista machine it is renaming their %username% folder on the
server to "documents". This obviously poses a problem since I can't
have a home directory folder where all of the folder names are
"documents". Does anyone know how to get around this or why ...
|
1 |
23.05.2007 14:46:09 |
|
Different Profile When Disconnected From Domain
Hi,
I've got a group policy applied to domain users that forces them to use a
blank screensaver and locks their PCs when they've been inactive for 10
mins. This is fine in the domain environment, but there is a laptop user who
needs this policy disabled when they're disconnected from the domain.
Presentations are used on this laptop when it's off site, so it can't be
switching to scre...
|
2 |
23.05.2007 13:06:17 |
|
redirect My documents
when I set redirection for my documents to \\servername\home\ GPO automatically
adds Clair\My Documents to the path as an example
all works well but when I set it redirect to \\servername01\home only Clair
is added, the My Documents is no longer showing
anyone else seen this?
whenever I remove or change only one character in the path the My Documents
suffix reappears
it is also gone when...
|
1 |
23.05.2007 09:28:13 |
|
msi
Hi there,
If I put an msi into group policy to install, does it install the software
everytime the computer starts? Or does it check that the software exists and
only install it if it does not exist?
Thanks,
Steve....
|
4 |
23.05.2007 08:08:46 |
|
Limit profile size...
Hi,
I have enabled the User Config/..../User profiles/Limit Profile Size
property because I wanted to warn the users if their profile had grown
too big.
But users with profile exceeding the max size cannot log off the domain
any more. A dialog with my custom message and a list of profile files
with filesizes pops up and both closing it or clicking its OK button
just aborts the log...
|
6 |
23.05.2007 07:46:37 |
|
Folder/Profile re-direction Errors
Once upon a time I had a group of users with roaming profiles. I have since
changed that and removed the profile path from each user. On those users
systems I am getting errors that the re-direction failed. If I create a new
user and copy one of the old users, they also get the same error. How can I
get these errors to go away, aside from re-creating all the users.
--
Chris Millette
M...
|
8 |
23.05.2007 07:13:50 |
|
Windows 2000 server and XP Clients
My DCs are still Windows 2000 SP4. My clients are all XP SP2 and a few 2000
SP4. My computer that I have a bunch of admin tools on is a Win XP SP2
computer.
When I manage Group Policies for the domain from my XP computer I have a lot
more options since I have newer ADM files than on the Windows 2000 servers.
Should I just download and install the XP SP2 Admin files on my Windows 2000 ...
|
2 |
23.05.2007 05:49:59 |
|
XP SP2 vs W2k3 SP2 for GPO editing
Which is the best platform to use for GPO editing nowadays? It used to be
that XP with SP2 was the platform of choice due to LISTBOX ADDITIVE
attribute change in ADMs and the fact that XP with SP2 had the latest and
greatest ADM set.
It now seems that W2k3 with SP2 has the latest AMDs subset with some minor
addition on top of what XP SP2 provided. So the question is. Should someone
us...
|
8 |
23.05.2007 03:56:38 |
|
DHCP - Access denied
For some reason I am getting a number servers giving me this error, The
solution is to grant the NETWORK SERVICE account write permissions on two
registry keys
(I can't remember the KB article number that gives this solution).
Rather than go to 100 servers, I want to use Group Policy to add these
permissions to the registry.
I found article
http://technet2.microsoft.com/windowsserv...
|
1 |
22.05.2007 22:50:15 |
|
How does OU delegation work?
Hi,
Have any of you guys ever tried using "delegation" at the OU level?
The idea is the you can have departmental Admins who are NOT Domain
Admins. You set it up by right-clicking an OU.
My problem is that I don't know how it works behind the scenes. If you
set up a domain Admin or even "force" a departmental Admin onto each
machine, I can understand it - you are basically adding th...
|
12 |
22.05.2007 21:49:46 |
|
User Logon Script
I have a question regarding user logon scripts distributed via GPOs. I have
two GPOs applying to user on XPsp2, both with separate logon scripts
specified (scripts are stored in the policies themselves), and I note that
the scripts are executed once explorer.exe is ran. Is it true to say that
GPOs are queried and the scripts are queued until explorer starts (by
default)?
What happen...
|
3 |
22.05.2007 21:30:00 |
|
GPMC/Migration table issue
Hello,
We have found an issue with the GPMC tool and I would like to know
whether anyone has seen this before.
Actually, we use a pre-prod domain to prepare and tests new GPOs.
This pre-prod domain has been cloned from the production domain.
So the domains have the same SIDs.
Now, when we export a GPO from the pre-prod domain and reimport it
into the production domain, there are some ...
|
1 |
22.05.2007 18:44:13 |
|
Block .exe files from home directories
Is there a way to prohibit exe files from running out of a user's home
directory? We have the desktops locked pretty tight but the students run any
exe files that they manage to download out of their home directories. The
home directories reside on a member Windows Server 2003 R2 box...
|
8 |
22.05.2007 16:35:41 |
|
Startup Script Installation
I was wondering if anyone had an insight to what would be stopping my
install. I am trying to install Office 2007 via startup script. I
have set up the installation point and permissioned it so domain
computers have proper permissions to the files and folders inside the
share.
When the script runs at startup, it steps through properly but it
never installs the software. I tried to map t...
|
3 |
22.05.2007 16:34:30 |
|
GPO to disable Wifi
Hello
Do you know how to disable the wifi ? (gpo ?)
Many Thanks...
|
1 |
22.05.2007 15:22:53 |
|
local error when trying to check out GP for admin
"Operacja Microsoft Disk Quota nie powiod³a siê z powodu b³êdu
wymienionego poni¿ej.
System nie mo¿e odnale¼æ okre¶lonej ¶cie¿ki."
and my translation to english is:
"Operation Microsoft Disk Quota has not been suceed because of error
below.
System cannot find specified path."
it is directly translated to english, any idea what kind of error it
can be ? what shall I do ?
I dont even kn...
|
1 |
22.05.2007 13:29:22 |
|
Loopback causes settings to follow user to other computers
I have a few computere that I don't want to go out to the Internet at all.
I don't give the computers a default gateway which helps, but I also
configure a bogus proxy server in Group Policies and I also disable the
Connections tab in ID
User Config -> Win Settings -> IE -> Connections -> Proxy Settings
Enable Proxy = Checked
HTTP: = BogusProxyServer Port 80
This works gr...
|
3 |
22.05.2007 13:18:20 |
|
GPMC
Hello,
Do you if it would be possible to use GPMC from Vista on XP
Many thanks
Cheers.
...
|
3 |
22.05.2007 08:36:00 |
|
What is the difference between "legacy" & "windows 2000" logon scripts
I am looking at "run logon scripts visible" and don't understand the
difference between "NT4 legacy" and "windows 2000" scripts.
The context help refers to "batch files" in both instances
regards
roga
...
|
2 |
20.05.2007 19:28:53 |