|
Help Managing Local Group Policies
Hello,
I need some assistance in managing local group policies (LGPs) on my XP Pro
SP2 machines. These machines are in a 2003 domain and those policies are
fine. My question relates to managing the LPGs on these machines, either in
out of the domain. I need to do this because these machines are sometimes
placed into workgroups. Also, I want to be able to set the LPGs in addition
...
|
2 |
27.04.2007 08:40:23 |
|
GPO-Assigned Software from DFS on Clustered 2003 Server - Please H
I'm trying to set our software distribution point up on a DFSRoot this is
hosted on a clustered Windows 2003 file server.
I've setup the DFSRoot and software dist file share using Cluster
Administrator and applied Read permissions to Authenticated Users on both as
well as setting the same permissions for NTFS. I have no problem assigning a
piece of software in a policy pointing at \\cl...
|
2 |
28.04.2007 00:05:13 |
|
Loopback Processing Mode
I'm trying to set some user settings for people that login to specific
computers. The computers are spread out over different OU's. I have
Loopback Processing Mode set to merge, but it doesn't seem to be working
correctly. When I run RSoP, it doesn't show it getting applied at the user
level.
All the computers I'm trying to set are in a group. I gave the group read
and apply group p...
|
2 |
27.04.2007 23:53:09 |
|
User-based policy to configure domain password settings
I have a need to be able to set the password age for one particular user
differently than the rest. In other words, our global domain password
settings require domain passwords be changed every 180 days and the user is
prompted to change starting 14 days out from expiration. I have one user that
I need to set at 90 days and to be prompted 7 days out. The only GPO settings
I could find we...
|
2 |
27.04.2007 21:43:14 |
|
IE7 and favourites and links
We are deploying new pc’s in the company
Win XP, Office 2003 and IE7 with all the latest patches and service packs
I created a GPO that defines URL/favourites and links
Settings are “place favourites and links at the top …†enabled
Delete existing favourites/ channels is not configured
The users have a roaming profile
When they first log on to the new machines they loose their existi...
|
2 |
27.04.2007 14:28:03 |
|
Group Policy Firewall Exception Problem
Hopefully this is the best NG for this issue:
I have set up about a dozen or more Windows 2003, R2 servers on our AD
domain of about 8000 computers. On each of these I have set up the Windows
Firewall with exceptions for things such as File Sharing and Remote Desktop,
limiting the scope to the Class B network represents our corporate network.
A few days ago, users suddenly and tempora...
|
7 |
27.04.2007 01:24:03 |
|
unlock computer log off rights
This is a multi-part message in MIME format.
------=_NextPart_000_0058_01C78659.ACD96C50
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Is there a security setting I can set to allow a helpdesk users to log =
off another user who has the screen locked with (ctrl + alt + delete).=20
I would like to avoid telling helpdesk to just power off the ...
|
3 |
26.04.2007 21:56:35 |
|
How to minimize amount of unnecessary files in profile..
Hi,
Where can I find info on which gpo properties to set to minimize the
size of each user's roaming profile (low temorary internet cache, other
temp files deleted etc...).
w2003r2 server and winxp-pro clients
Thanks for comments and hints
Jake...
|
4 |
26.04.2007 21:41:46 |
|
GPO in Citrix/Terminal Server environment
For the first time I'm in the process of implementing GPO so I need some
basic guidelines to get started.
We have various users using various applications some GPO's will apply to
all of them and some GPO's will apply to a few of the users. Should I
create a different GPO for each group of users or should I create many
different GPO's and apply them to who ever needs them. I'm thinkin...
|
3 |
26.04.2007 09:12:42 |
|
Sample code for a Group Policy Client-side Extension (C++)
Dear Expert,
I have to write a Group Policy Client-side Extension in C++ and would
like to look at a sample CSE written in C++.
Any help or pointer (pun not intended) in this direction is greatly
appreciated.
Thank you very much.
Ruchira
...
|
3 |
26.04.2007 08:46:58 |
|
GPO Software Installation Question
Dear all,
I would like to know the implication of enabling the "Always install with
elevated privileges" setting. Does this mean that all subsequent MSI files
(downloaded from the WEB or from CD/DVD) can be installed on machine that do
not have admin privileges?. Thanks.
Regards,
Kueh.
...
|
5 |
26.04.2007 07:48:42 |
|
Group Policy Client-side Extension in C++
Dear Expert,
I have to create a group policy client-side extension in C++. I have
googled a lot to find sample code or instructions on how to do so.
Any help in this direction is greatly appreciated.
Thanking you.
Ruchira
...
|
1 |
26.04.2007 04:23:26 |
|
turn off headers and footers in IE
Hi there,
I would like to turn the headers and footers off in IE7 with group policy. I
have found you can do it locally like this:
To change how a webpage looks when it prints
Click the arrow to the right of the Print button , and then click Page Setup.
In the Header and Footer boxes, specify the information to be printed by
using the following variables. Variables can be combined wit...
|
5 |
26.04.2007 02:46:02 |
|
Missing Quick Launch
There is a setting some where in the GPO for students at our school that
turns off the Quick Launch Bar. Can anyone point me to the correct setting?
TIA
...
|
4 |
25.04.2007 22:04:03 |
|
Admin Template to force users of on a particular computer.
Can someone please help me by providing me with a group policy template to
force any user of a particular computer if they have been idle for 60 minutes.
I believe that it can be done by changing the screen saver to use
winexit.exe.
If you could also point me to a url that explains the creation of these
templates and a list of fields that can be used it would be greatly
appreciated.
...
|
5 |
25.04.2007 21:34:00 |
|
GPO and Win 2k Pro Clients
We are in the process on migrating to Active Directory. We are in mixed mode,
I created OUs to separate our Corporation's entities. There are two parent
OUs that separate the two majority companies, and child OUs under each that
breakdown the smaller businesses. I applied exceptions for Windows Firewall
at one of the parent OUs for Anti Virus. After moving computers into the
child OU of ...
|
3 |
25.04.2007 21:32:43 |
|
Export/Import GPO settings
Hi All
I've got a nice little GPO settings list on my 1st school's server and now I
want to use this on my 2nd school's server.
Is there anyway I can CLEANLY export and then import the GPO settings from
one server to another?
Thanks
...
|
2 |
25.04.2007 19:17:34 |
|
Folder Redirection
Hi, I configured folder redirection through GPO on a Windows Server 2003
domain. The folders are being redirected properly but when creating a new
user It is not moving existing desktop shortcuts from Default User profile to
the new redirected location like it used to when I first configured the
folder redirection. Has anyone seen this problem. Yes the box next to Move
the contents of De...
|
1 |
25.04.2007 14:26:06 |
|
IE7 GP settings seem to have disappeared with WS03 sp2
I use a Terminal Sever with GPMC installed to mange GP's for use on the TS &
XP SP2 workstations
I have just noticed that since SP2 for server 2003 many of the IE7 options
have disappeared (e.g. "Moving the menu bar above the navigation bar")
Is there a work round for this?
regards
roga
...
|
2 |
25.04.2007 07:16:06 |
|
Creating .adm File
I am trying to create an adm file to redirect my favorites to a specific
location using goup policy. When I try to load the file I get an error
message saying it's expecting category but categor is what's there. I don't
understand what's going on because I have category there. Can someone please
look at the contents of my file and let me know what's going on. (I using it
on a Windows...
|
4 |
24.04.2007 21:40:49 |
|
Folder Redirection
Ok, I am confused, I created a folder redirection for a users desktop file.
Set it to redirect to server\profiles\user\desktop
Worked ok.
When the user logs onto the server throught terminal services if you right
click a desktop file, sure enough it shows as located at
server\profiles\user\desktop
But if you go to the c:\documents and settings\user\desktop, the files are
all being c...
|
2 |
24.04.2007 21:08:44 |
|
File association permissions via Group Policies
We've got some Crystal software that requires users to clear the "Browse
in same window" option for XLS files in the Advanced window of Folder
Options - File Types. Unfortunately, this option is only available to
administrators.
I want to give regular users the ability to change this option, and I
thought I could do it by applying a Group Policy that modifies the
permissions of the ap...
|
5 |
24.04.2007 20:09:19 |
|
IE changes in GPO- Now "Open File Security Warning"
I changed some security settings for Internet, Local Intranet and Trusted
sites in our domain GPO. I also imported some Trusted sites from the
workstation that I am using GPMC on to User Config- IE Maintenance- Security
Zones and Contect ratings- security zones and privacy for that same GPO. Now
we have users getting an "Open File Security Warning" when using
applications. What setting c...
|
3 |
24.04.2007 15:58:05 |
|
HKCU_Explorer 'Shutdown Setting' GONE on Vista!
Hi,
When it's time for users to log off, and if they choose "Start : Shutdown",
I want them to have "log off xxxyyyzzz" as the default. With help from this
group some time ago, I set up a logon script to do this with my old Win2k
setup and it's been working great ever since, it also has a check to exclude
laptop users. The basic idea was to set the Shutdown Setting DWORD value in
the regis...
|
1 |
24.04.2007 15:21:36 |
|
HKCU Software Publishing State Key
Please - could someone point me in the right direction?
At HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust
Providers\Software Publishing is the value State and it is set to 0x00043c00
which according to SPats blog
http://blogs.msdn.com/spatdsg/archive/2006/06/05/618082.aspx
means "allow only items in personal trust database".
I want to reset the value to 0x00023c00 bu...
|
2 |
24.04.2007 10:43:45 |