Threads Replies Last Post 20 Pages: 1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  18  19  20   Computers Group Policy over VPN tunnel We are using Nokia IP40 firewall appliance to connect some of our branch offices to our data center. The WSUS group policy is not applied to any of the computer in the branch offices. Domain is 2003 native and clients are XP prof SP2. Folloiwng is the error that shows up when I run the RSoP on the PDC for any of the affected computer: ***********************************************... 2 15.05.2007 05:21:00 Missing Desktop Shortcuts Hi, Somehow I have managed to hide all shortcuts/icons in the all users desktop from users desktop when logging onto a terminal server. Adding new shortcuts to the all users desktop remain hidden from the users desktop. I thought this setting was under the setting User Config> Admin Templates>Desktop>Hide all items on Desktop. However I have since disabled this option and ran... 3 14.05.2007 21:54:19 XP Polcies in a Win2k Domain I have a Windows 2000 domain. I want to be able to edit XP SP2 group policies. If I follow the instruction in http://support.microsoft.com/kb/307900 the template does not update. If I copy the ADM files extracted from “admFiles_WindowsServer2003SP1.msi” which I downloaded from Microsoft, and put the .ADM files in the windows\inf folder on my XP SP2 machine, I can update and edit the ... 7 14.05.2007 17:41:01 Local Group Recursion, Creation, and GP I have hundreds of embedded systems spread across a college campus. I administer them largely by Group Policy. Our Group policy administration was quirky with many rights needing to be set, many issues solved, and hence many bugs created when creating policies or discovering changes in policies that needed to be propagated to other policies. Some systems have a distinct local groups need... 7 14.05.2007 15:47:47 Internet Explorer security zones Scenario: I want to assign a handfull of sites to the Intranet zone in IE 6&7 across an entire domain. No problem, use the site to zone assignment list. Works like a charm. Problem: Users, including domain admins, can no longer modify their Trusted Sites zone. Is there a way around this? thx...wayne ... 1 14.05.2007 15:47:33 Group Policy on a remote computer when I want to connect to a remote computer group policy (in either domain or workgroup) I encounter the following error message. ==> Failed to open the Group Policy Object on the %myremotecomputername%. You may not have appropriate right. How can i solve this problem? P.S. I am using EnterpriseAdmin user in my domain environment. Thanks... 6 14.05.2007 14:26:02 Loopback policy enabled, seems to cause login script to run twice As far as I can tell, enabling loopback processing in a seperate group policy seems to be cause our login script to run twice on login. I have a seperate policy for running the login scripts (default domain one) and another where this is enabled (a screen saver policy).. IE: I thought i read somewhere that it is bad practice to modify the default policies.. so I try to to create seperate po... 4 14.05.2007 13:04:01 change profil path with GPO, Folder Redirection Windows 2003 Hello Together I have the following problem. On a Windows 2000 DC the GPO is configured to redirect Application Data, Desktop, My Documents and the Start Menu to the path: \\server \home@xxx$\%username%\data\..... Now i need to change the location for all this data to the new server like this: \\newserver\home@xxx$\%username%\data\..... It's not possible to put this in the Root Path. Err... 1 14.05.2007 12:24:09 How to Consolidate or Combine GPOs In an effort to reduce logon times, I'm looking to consolidate or combine many GPOs into fewer GPOs. Are there any tools or tricks to help me combine GPOs rather than doing all the edits manually? Do I need to simply use the Group Policy Results to view the RSoP details and then manually create a single GPO with those settings? Seems to me this is the kind of work computers were inven... 3 14.05.2007 08:11:39 How to create a group policy to deny access to services.msc and ms I have a user who likes to stop specific services that I do not want stopped. Can someone tell me how to create a group policy to deny access to services.msc and msconfig on the local XP computer to all users except domain admin? Windows Server 2003 SP2 - Windows XP Pro SP2 -- Dennis... 4 14.05.2007 07:54:31 Group Policy processing aborted Our print server logging error event ID 1053 with following description and it is getting resolved temporarily only after restart the server Windows cannot determine the user or computer name. (Not enough storage is available to complete this operation.). Group Policy processing aborted. If any one of you know or face the same problem please help in resolving it Thanks, ... 3 14.05.2007 03:06:06 Use Group Policy to add domain user to local Admin group AD 2003 XP workstations Tried running the Restricted Group Policy and this removed all users/groups in the local Admin group except local Admin account Is there a way to run this or another group policy without it removing existing members of local Admin group? Any help appreciated DP... 3 14.05.2007 00:56:58 Windows updates GP setting question Hi there, I plan on adding a group policy to all domain computers that makes it so they never restart after a windows update. Everyone finds it very annoying. I wanted to do this: Computer Configuration/Administrative Templates/Windows Components/ Windows Update/No auto-restart for scheduled Autimatic Updates installations Everyone computer is on the domain however not all user accou... 3 14.05.2007 00:49:44 Desktop Standard PolicyMaker License issue We recently purchased the Desktop Standard PolicyMaker software that Microsoft acquired several months ago so I submitted a license request and received a license file. I applied the license file to a test gpo then rebooted the client computer I was testing the gpo on. Upon reboot the following error message was logged in the application log: Policy for machines, in the GPO 'Configura... 5 13.05.2007 22:59:03 Windows firewall for domain controllers Once, long ago, I read that you should not turn on Windows firewall on domain controllers. So we had 'Protect all network connections' enabled for our entire domain, with it disabled in the Default Domain Controllers Policy. Everything was working fine. Recently, I found a white paper from MS titled "How to configure Windows Server 2003 SP1 firewall for a Domain Controller" (http://suppo... 3 13.05.2007 21:58:19 IEM and other IE Settings. I need some users' IE Settings to be centrally managed via GPO. I found that IEM (Internet Explorer Maintenance) extension is something nice to use as it will import local IE settings. I've seen that there's also a GPO tree under Administrative Templates/Windows Components/Internet Explorer that looks to have similar settings to the ones that can be managed by IEM. Now I am pretty c... 4 13.05.2007 21:16:04 Can't get Active Desktop to work We have an OU for training computers. I'm trying to force a particular desktop wallpaper to appear on all Training computers. In a GP I created, under User Config\Admin Template\Desktop\Active desktop, I set enable Active desktop and Active Desktop Wall paper. But when a user in that group goes to log in, the Wallpaper does not load. I have the local path for the wallpaper (it's the ... 2 13.05.2007 08:10:53 GPO Reinstall I have tried dcgpofix.exe and I get the following error: Unable to read EFS certificates from Registry.pol file of Default Domain Policy.... I keep getting 1030 & 1058 errors in logs. I can not even view the GPOs. This is a win 2003 server. Problems started after upgrade from win 2K server to win2003 server. Any suggestions to zap this and start over with the GPO? ... 6 12.05.2007 16:40:22 force GPO from root to child domain Hi, is there a way to force a GPO from a Win2003 parent-domain to a child-domain? We have a Win2003 forest with a Win2003 root-domain and some Win2003 child-domains. All child-domains have their own DC's. If I set up a GPO at the root-domain and link it to a child-domain the domain-administrator of the child-domain is still able to modify even to disable this root-gpo. In my case every c... 2 12.05.2007 07:27:34 Multiple database(datasource) updation using single datagridview hi, Operating System: Xp Language :Vb.Net 2005 Connetion :Oledb Provider :OraOLEDB.Oracle Oracle Version :9i vfp connectionstring : gstrPVMDBPath_I = "Provider=vfpoledb.1;Data Source=\\it-development\IT Development\Development\Chandlers\Sales\PV\Data;Collating Sequence=Machine" im binding and storing the oracle database, its working fine with num... 4 12.05.2007 07:19:02 Proper method for using a script and Group Policy? Something I really did not think about, but thought I would ask here to get suggestions. I am going to use a script to reset a specific account on all computers in a specific OU. Seems pretty straight forward right? I am using a VB Script to do the action. So, really, as I was thinking today, my question was, what is the most proper, BEST method to use a script like this with Group Pol... 2 11.05.2007 19:31:48 GP Assigned Software will not install We are trying to deploy a new version of Spysweeper via GP. We have followed the steps exactly from 816102. We created a share on the DC, added the .msi file to the share, checked the permissions etc. If we browse out ot the share and double click the .msi file, it installs without a hitch but it will not install otherwise. The policy is under "Comp Config, Soft. Settings, Soft Install", i... 7 11.05.2007 19:26:46 WSUS GPO: Specify intranet Microsoft Update service location How can I control which WSUS server a computer uses based upon the site they are located at? I see in GPMC that there is a Sites folder and I can display my three sites within it. It looks like I can link GPO's to the site also. But I don't see this as a valid technique to use in the document "Deploying Microsoft Windows Server Update Services 3.0". Instead, I read in "Appendix D: ... 11 11.05.2007 18:11:04 Internet Explorer Privacy tab -> Internet Zone settings I'd would like to allow users to manage their pop-blocker list. I can do this by allowing access to the Privacy tab in the Internet Control Panel. However this has the side-effect of also allowing users to change their privacy settings for the Internet Zone which is also on the privacy tab. There is no GPO option to disable only changes to the Internet Zone privacy settings but al... 1 11.05.2007 14:17:08 Cannot deploy 2000 adminpak under Svr 2003 To manage Server 2003 from Windows 2000, the Server 2000 adminpak is required and this does support Server 2k3 management. The problem is that when setting up group policy to deploy the package an error is generated that implies that the 2000 pak cannot be used because it is not a 2k3 package. The message says that the adminpak.msi should be validated. We can successfully deploy the 2k3 ... 3 11.05.2007 14:00:04 20 Pages: 1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  18  19  20