|
Remote Desktop restricted groups via group policy
Currently, alot of our users are administrators of their own computers. One
problem this poses is they have the ability to log onto their computer w/
remote desktop with their user account.
Is there a way via group policy that I can restrict all accounts from being
able to use remote desktop except for one or two groups?...
|
2 |
29.06.2007 12:58:01 |
|
Deploying Office 2003 package... GPO applying, "software installation" policy not applying
Hello all,
This is my first venture into deploying an MSI with Group Policy and
I'm running into a non-sensible problem: The GPO is being applied
fine... but the RSoP shows that other policies from the GPO are
applying fine; but I get nothing under the "Software Installation"
policy.
I believe the policy is configured properly (it is applied at the
computer level, it is assigned, I have...
|
6 |
29.06.2007 13:06:02 |
|
Outlook 2K3 Archive Settings via GP
I'm trying to figure out how using GP, I can set Auto-Archive settings for
users. I'm particularly interested in changing the defaul Auto-Archive file
and path to a network folder for backup purposes.
The path would be \\data\users\%username%\outlook2k3.archive.pst
I run an Exchange server on SBS2K3 server with about 20 client machines, all
running XPSp2, and Office 2003, all latest up...
|
9 |
29.06.2007 07:30:10 |
|
Policy wanted to set default Outlook new mail signature
I want to impose a policy on my domain Outlook users that sets the
default signature for new mail (we have already distributed the
signature files).
However, I'm new at this and confused as to just how to go about it.
There doesn't seem to be a settting for it provided in the management
console, so I think I have to create a new .adm template for it? I'm not
really sure how to d...
|
3 |
29.06.2007 07:22:58 |
|
restrict who can log onto certain workstations
Where in group policy can I specific who can log onto the accounting
workstations? I have the accounting computers in an OU.
Thanks!
...
|
2 |
29.06.2007 06:24:37 |
|
Scripts/Active content not running under GPO
Hello,
We have deployed a w2003 server domain with Exchange and Group Policy to
prevent general users to have control over their machines in certain ways. It
is working superb but, some annoying issues are driving me mad and the main
one is that the restricted users have problems running javascript or active
content in some webpages, this is, the browser sometimes says that "you need
...
|
1 |
28.06.2007 22:28:02 |
|
Group policy not being fully applied
I am having issue with my Win2000 based active directory, specifically the
group policy. What is happenning is that only part of the policy is getting
applied.
When I run rsop.msc the User Configuration completes with out a problem but
the Computer Configuration tells me that the specified domain does not exist
or could not be contacted. If I run gpupdate on the system it goes through
...
|
3 |
28.06.2007 20:52:21 |
|
Please Help - WMI filter for IE7
have the filter for IE6: select * from MicrosoftIE_Summary where Version
LIKE "%6%"
but this does not work for IE7. I need to apply a GPO only on IE7 XP SP2
computers. Can someone please tell me what the WMI filter in IE 7 is? I am
desparate.
--
rlurker(Roberta_Weinberg@bd.com)...
|
1 |
28.06.2007 16:16:00 |
|
Group Policy - Encrypt Offline File Cache
I have had a good read up of EFS. However I am not looking to encrypt data on
the network, simply encrypt the offline cache of remote users. I do not feel
this requires the creation of recovery agents / exporting certificates. I was
advised that encrypting the offline cache is not 100% as files may be
viewable via the temp folder or held in the page file.
I created a GPO and configured...
|
1 |
28.06.2007 14:02:08 |
|
Setting hibernation for all users on Windows XP Pro. SP2!
I was wondering how to set hibernation for all users on Windows XP Pro. SP2.
--
Cat2k1 *Signs with a Paw*...
|
2 |
28.06.2007 08:15:32 |
|
Windows Media Player ignores policy on XP
I've enabled the user GPO for "Prevent CD and DVD Media Information Retrieval".
It works for W2K3 WMP 10 and Vista WMP 11.
That policy said it works for series 9 and later...
but our Windows XP WMP 9.0.0.3349 clients ignore the policy settings which I
verified are in the user's registry.
The only article I found was 822964 http://support.microsoft.com/?id=822964
but that was fixed i...
|
4 |
28.06.2007 05:38:49 |
|
Desktop Shortcuts
Any deletions made to desktop shortcuts are not being saved. When my machine
is re-booted the deleted shortcuts re-appear.
Also I deleted a file from Program and all associated references, and it too
reappears when my machine is rebooted, even though the files have been
un-installed.
What am I doing wrong? Any ideas?
...
|
2 |
28.06.2007 05:28:19 |
|
Rolling back GPO changes
I applied a change to my domains default GPO adding a group to the log on
LOCALLY SECTION OF USER RIGHTS ASSIGMENT. i BELIEVED THAT ADDING THE GROUP
WOULD STILL ALLOW DOMAIN USERS TO LOG ON TO THEIR pcs AND ALSO THIS NEW GROUP
to access the PCS too.
i FOUND THAT USERS WERE BEING DENIED THE RIGHT TO LOG ON TO THEIR pcs so i
removed the group and put back things to how they were. Even af...
|
2 |
28.06.2007 02:05:08 |
|
Permissions on registry key not consistent on client
I am using group policy to set Users and Power Users to Deny: Read on a
certain registry key. When I go to the client and perform a RSOP, I see the
keys listed but when I view the security it reads 'Everyone: Full Control'.
What's going on here?...
|
1 |
27.06.2007 16:32:01 |
|
Logon script is hit or miss
I have a logon script pushed out with a GPO that updates the description
field of the computer object in AD with the user logging in, the time and
the serial number of the machine. It works flawlessly for my main site on
all the desktops. However it does not work on any laptop except mine and the
other admin, does not work on any computer in my two remote sites unless it
is me or the oth...
|
1 |
27.06.2007 16:05:34 |
|
IE7 and Intranet Zone policy
Starting with IE7 the browser behaves diferently when opening popup windows
from sites considered to be in an Intranet zone vs the Internet zone. The
Intranet behavior is to forgiving (i.e. alowing users to size windows that
are marked non-sizable, allowing URL manipulation, etc.). As we have an
internal web application that needs to be tightly controled, I need all my
users who access o...
|
1 |
27.06.2007 07:38:59 |
|
Two part Group Policy question
I have two issues that I need to try and solve:
1. I recently installed WSUS and configured client connectivity through
Group Policy. I have tested it, and it works on about 30% of our computers.
I discovered today that our HelpDesk has been deploying imaged with Group
Policy disabled (Ugh!). Is there any way to script, or otherwise remotely
enable, Group Policy on domain PCs?
2....
|
6 |
26.06.2007 20:31:00 |
|
Group Policy Management console - where to apply computer settings
I have created some Group Policy Objects in the Group Policy Management
snap-in that should be applied to the domain Computers, rather than the
domain Users. (Restricted Groups, offline files and so on). My problem is,
I can't find within the Group Policy Management snap-in where to link them!
I can't find either the OU 'Computers' that is listed in the AD Users and
Computers window, ...
|
3 |
26.06.2007 14:40:01 |
|
Folder re-direction via GPO problem
Hi - WinXP/2k Server,
I am redirecting My Documents to a server share for field based users, and
this part works fine. However, when they connect via VPN they go online
automatically, which causes a performance hit dragging files down the wire
etc. Is there a setting to stop this hapenning, I;ve had a good look
through Group Policy but can;t seem to see anything that would allow you t...
|
3 |
26.06.2007 14:17:13 |
|
Experience with redirected Desktop and AppData profile folder
Today we are running with roaming profiles (limited to a size of 60Mb) and
the My Documents and My Pictures folder redirected.
We are planning to redirect the Desktop and Appdata Folder. The two folders
should also be made offline available.
Is someone out there, having experience with redirected Desktop and AppData.
- Would you recommend to redirect Desktop and AppData?
- Where do ...
|
1 |
26.06.2007 11:01:03 |
|
Home Page not loading until I hit refresh button, after a GPO modification
Hi,
Yesterday I had to turn an option ON in the Internet Explorer Maintenance -
Preference Mode in my default user GPO. After i did my modification, all my
users had the same problem. Once they start their internet explorer, their
home page refuse to
load. They get a dns error timetout. But if they hit the "F5" key or the
refresh button from the browser (wich is Internet Explorer 6.0)...
|
8 |
26.06.2007 06:25:42 |
|
MS Word normal.dot
My company want a standardised look and I need to set margins, page layout,
and font settings globally for the normal.dot default template but cant find
any information. The office10.adm doesnt seem to cover these settings but
will it allow adding additional settings? I'm a mixture of office XP and
2003. I'm fine with using GPO's but cant find anything relating to MS word
so any help apprecia...
|
4 |
26.06.2007 05:36:26 |
|
temporary bypass GPO on a XP (non domain)
Hi,
I have a XP and used gpedit to lock it down pretty well...it there any way
to login as a different user so I get the non-kiosk gpo (default XP
settings) and so I can do maintenance on the box;e.g., add/remove some
programs, manually perform a WU update, revise the desktop wallpaper, and
etc...?
thanks in advance...
|
2 |
26.06.2007 04:53:37 |
|
How do you apply a registry setting to GPO
I need to lock down the Citrix server drives M: & N: from users.
I have so far I have created a separate OU and put all my Citrix servers in
this OU.
Using the GPMC, I have prepared the server for loopback as below:
Computer Configuration > Administrative Templates > System > Group Policy
User Group Policy loopback processing mode > Enabled > Mode Replace
Can someone ...
|
9 |
25.06.2007 21:47:38 |
|
Group Policy and Registry Settings
I have a need to correct the permissons on the following registry key so that
domain users can use it. HKLM/Software/Zywave. Is there a way to set the
permission using Group Policy? I tried but undoubtably I did it wrong....
|
4 |
25.06.2007 19:32:19 |