That indicates that something is preventing Admi. Template policy from running.
Posting the relevants part of userenv.log would be helpful.
Darren
-Original Message-
From: Paul G. DaSilva [EMAIL PROTECTED]
Cc: ActiveDir@mail.activedir.org
Sent: 11/10/2006 10:43 AM
Subject: [ActiveDir]
the gpmc.chm file in the %programfiles%\gpmc\scripts
folder.
Tony
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray
Sent: Thursday, 15 June 2006 9:38 a.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] gpo and script
Hi Myke
Yes
] On Behalf Of Myke
Sent: Friday, June 16, 2006 7:57 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] gpo and script
hi Tony,
I wanna design some scripts, for Windows 2000, with the same functions as
GPMC script's have.
The problems is: I wanna write generic scripts, to windows 2k and 2k3
Hi Myke
Yes it is possible. Have a look at the sample scripts that come with
the Group Policy Management Console (GPMC).
http://www.microsoft.com/downloads/details.aspx?FamilyID=0a6d4c24-8cbd-4
b35-9272-dd3cbfc81887DisplayLang=en
Tony
-Original Message-
From: [EMAIL PROTECTED]
file in the %programfiles%\gpmc\scripts
folder.
Tony
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray
Sent: Thursday, 15 June 2006 9:38 a.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] gpo and script
Hi Myke
Yes it is possible
Russ-
The right answer with Software Installation is pretty much to always use
DFS. That way if the package ever has to physically move off of a server,
the path doesn't have to change. Path changes aren't supported in GPSI
without a re-install. So,to answer your question, yes, I would use DFS to
PROTECTED] On Behalf Of Darren Mar-Elia
Sent: Friday, June 09, 2006 3:33 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO deployment limit
Russ-
The right answer with Software Installation is pretty much to always use
DFS. That way if the package ever has to physically move off
.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ
Sent: Friday, June 09, 2006 2:50 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO deployment limit
Are you saying that if I deployed an MSI to a bunch of users from
What you need to do is get your file servers at strategic points on your WAN
(hub, edges, etc) setup and use DFSR to replicate the MSI. Then you can
deploy the MSI from the DFS path and your clients will use the local copy.
Thanks,
Brian Desmond
[EMAIL PROTECTED]
c - 312.731.3132
Title: GPO Screen Saver
Hey Christine-
You might want to check and see if something has changed on
the filtering of that GPO. If its linked to the domain then I would guess it
would be applying to all users in the domain, even if they are logged onto a TS
(unless you are using loopback in
r-EliaSent: Tuesday, June 06, 2006 11:09 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO Screen
Saver
Hey Christine-
You might want to check and see if something has changed on
the filtering of that GPO. If its linked to the domain then I would guess it
would be applying to
day, June 06, 2006 8:30 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO Screen
Saver
It is linked to the Domain and has been in place for about
2 years. I does filter down to our servers, which I liked. What's
weird is this just started happening and I'm not sure what
ch
[mailto:[EMAIL PROTECTED]
Sent: 16 May 2006 03:17 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO wierdness during forest migration
Nicolas-
I hope things are well in SA. So, one possible issue here could be in how
the machines have been moved between forests. Were they re-imaged
] On Behalf Of Darren Mar-Elia
Sent: 16 May 2006 16:27
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO
Software Deployment
So, I suspect what is happening here,
based on that error, is the popup you're seeing is Windows Installer trying to
repair the application but not finding
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: 15 May 2006 23:43
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO
Software Deployment
Rob
Do you have
access to the original MSI (it could be repackaged as an EXE)?
msiexec
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Robert
RutherfordSent: Tuesday, May 16, 2006 3:26 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO Software
Deployment
Hi
Guys,
Thanks for the input
but still no joy nothing is showing in the logs and I dont have
Good assessment.
When you have the machines cleaned up,
Adobe supplies a deployment preparation tool for this exact purpose. You
will have to do a bit of Googling for it.
NEVER edit or repackage an existing
MSI (not possible in every case). Always create a transform which can be
applied against
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO
Software Deployment
Robert-
If Installer is really doing something, it
should generate an MSI*.log file in %temp% (or in %windir\%temp% for per
machine installs). I would look in there for a recent one that shows what's
going
@mail.activedir.orgSubject: RE: [ActiveDir] GPO Software
Deployment
Hi
Darren,
Thanks for the
reply.
Unfortunately there are
no logs being dumped at all. The Windows intstaller screen literally just
flashes for a second and then vanishes, more or less each time they open a new
window or app
Rob
Do you have access to the original MSI (it could be
repackaged as an EXE)?
msiexec /i file.msi /L*vx c:\path\to\logfile.txt
That will dump out as much possible info about what
is happening. If you need
help debugging the output, let me know.
Cheers
Jon Austin
[EMAIL PROTECTED] wrote on
Nicolas-
I hope things are well in SA. So, one possible issue here could be in how
the machines have been moved between forests. Were they re-imaged or just
moved between domains? If the latter, then what you could be experiencing is
some crap (technical term) in the registry from the old domain
Thanks, Darren. Good
information.
Devin
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darren
Mar-EliaSent: Wednesday, May 10, 2006 10:09 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir]
GPO
This is primarily because
GP will only refresh if the GPO has
Hi Christine..
You can use the restricted groups function to add say domain users to the
power users group on the local machine. It's a little tricky as one
function of it will replace any other members of the power users group,
should there be any. As of XPSP2 though, you can do it additive,
: Re: [ActiveDir] GPO
Hi Christine..
You can use the restricted groups function to add say domain users to
the
power users group on the local machine. It's a little tricky as one
function of it will replace any other members of the power users group,
should there be any. As of XPSP2 though, you
Subject
05/10/2006 08:39 RE: [ActiveDir] GPO
AM
Robert-
If Installer is really doing something, it should generate
an MSI*.log file in %temp% (or in %windir\%temp% for per machine installs). I
would look in there for a recent one that shows what's going
on.
Darren
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Robert
John,
Just curious, was these option *ONLY* availiable in XP SP2? Any hope it exists in Windows Server 2003 SP1? :)
Thanks,
Jef
From: [EMAIL PROTECTED] Subject: RE: [ActiveDir] GPO To: ActiveDir@mail.activedir.org Date: Wed, 10 May 2006 08:49:21 -0500 HiPeter... IftheclientsareSP2
ail.activedir.org cc
Subject
05/10/2006 09:52 RE: [ActiveDir] GPO
AM
]
GPO
John,
Just curious, was these option *ONLY* availiable in XP SP2? Any hope
it exists in Windows Server 2003 SP1? :)
Thanks,
Jef
From: [EMAIL PROTECTED] Subject: RE: [ActiveDir]
GPO To: ActiveDir@mail.activedir.org Date: Wed, 10 May 2006
08:49:21 -0500 HiPeter...
IftheclientsareSP2
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Wednesday, May 10, 2006 10:58 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO
Hi Jef...
I'm sure it works with 2003 also, was really a bug in XP that they had
to fix, that the additive part just plain didn't
@mail.activedir.org
Subject: RE: [ActiveDir] GPO
Hi,
Is there a special security template I need to add because I can pick any
local groups like power users.
-Christine
Christine N. Allen
Systems Engineer
BMC HealthNet Plan
2 Copley Place
Boston, MA 02116
617-748-6034
617-293-4407
[EMAIL PROTECTED
8:02 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir]
GPO
Yes. Here's the KB
article referencing the fix (works for Win2K as well):
http://support.microsoft.com/kb/810076/en-us
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jef
KazimerSent: Wednesday, May 10, 2006
Subject
RE: [ActiveDir] GPO
05/10/2006 11:05
AM
, May 10, 2006 9:47 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir]
GPO
In my experience, this
now works but there is still one issue. In my testing, groups that you add to
the local group can be removed by a local admin and group policy does not
replace them. As a result, I use
@mail.activedir.org
Subject: RE: [ActiveDir] GPO
console version 1/2003 Admin tools.
Christine-
Default behavior whenever you edit a GPO
is that GP Editor will check the version of the ADM files that exist in
c:\windows\inf on the workstations where you're editing the GPO, and, if newer
Johnny-
The problem with using Folder Redirection policy in the first place is
that its all about moving files around. So, if you were to do something
to change it when users log onto a Citrix box, you'll have files copying
back and forth every time they move from one scope to another. You might
Hello Johnny,
you can use the loopback in replace mode which should do the trick
(then a user gpo should be in the OU, even if empty)
Friday, April 7, 2006, 5:38:20 PM, you wrote:
FJ We have a GPO in place for all users to do Folder Redirection of My
FJ Documents. We are experiencing
Have you removed Authenticated users from the GPO?
-Original Message-
From: Joe Lagreca [EMAIL PROTECTED]
Date: Thu, 23 Feb 2006 10:08:10
To:ActiveDir@mail.activedir.org
Subject: [ActiveDir] GPO Security Filtering to a group not working
I am trying to implement GPO Security Filtering to
Joe-
Are you removing the Authenticated Users ACE before you add the
discretionary group? You don't have any Deny ACEs on that GPO, do you?
Darren
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Joe Lagreca
Sent: Thursday, February 23, 2006 10:08 AM
To:
Yes, I did remove Authenticated users, or else the GPO would apply to
everyone in the domain, rather than just the group I am trying to
apply it to.
On 2/23/06, Mark Parris [EMAIL PROTECTED] wrote:
Have you removed Authenticated users from the GPO?
-Original Message-
From: Joe Lagreca
Authenticated users was removed from the GPO.
I have deny apply group policy only for all the admin groups, so I
don't accidentally appy the GPO to any of them.
The group I am trying to apply the GPO to, is not part of any other group.
Joe
On 2/23/06, Darren Mar-Elia [EMAIL PROTECTED] wrote:
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Joe Lagreca
Sent: Thursday, February 23, 2006 12:55 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] GPO Security Filtering to a group not working
Authenticated users was removed from the GPO.
I have
Not unless you applied it at the root. Only members of the OU.
-Original Message-
From: Joe Lagreca [EMAIL PROTECTED]
Date: Thu, 23 Feb 2006 12:54:44
To:ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] GPO Security Filtering to a group not working
Yes, I did remove Authenticated
I would now utilise the gpo modelling aspect of the gpmc to see where my
issues lay.
Mark
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris
Sent: 23 February 2006 21:34
To: ActiveDir.org
Subject: Re: [ActiveDir] GPO Security Filtering
Of Joe Lagreca
Sent: Thursday, February 23, 2006 12:55 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] GPO Security Filtering to a group not working
Authenticated users was removed from the GPO.
I have deny apply group policy only for all the admin groups, so I
don't
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO problem - Network card disappearing
We had this issue occur with systems also. Turned up to be an issue with the
firewall configuration on the PCs. This configuration problem was created by
group policy, which was limiting the services
We had this issue occur with systems also.
Turned up to be an issue with the firewall configuration on the PCs. This
configuration problem was created by group policy, which was limiting the
services which created a problem with SP2 for XP which used different
services then XP SP1. Not
ach policy applicable to each individual GPO or is the net result value from LSDOU used?
Thanks
M@
Subject: RE: [ActiveDir] GPO refresh intervalDate: Mon, 9 Jan 2006 11:55:43 -0800From: [EMAIL PROTECTED]To: ActiveDir@mail.activedir.org
Not sure I understand the question. Each system wil
@mail.activedir.orgSubject: RE: [ActiveDir] GPO refresh
interval
Sorry I should have been more specific. The "group policy refresh interval
for computers" setting in the Computer Configuration/Administrative
Templates/System/Group Policy if configured at LSDOU
levels for a computer or user, how
Not sure I understand the
question. Each system will apply GP at an interval dependent upon its role. For
DCs its every 5 minutes. For member servers and workstations its every 90 min
plus a +-30 minute randomizer. For a given system, the next processing interval
is determined when
e the perl code
:-)
joeware.netfine now - I'd guess it was just one
of those things that make life such fun!
Steve
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
joeSent: 10 October 2005 15:37To:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO Permissions
with
joeware.netfine now -
I'd guess it was just one of those things that make life such
fun!
Like DNS.
;o)
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Steve
RochfordSent: Tuesday, October 11, 2005 5:54 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO
datediff("s",now,sTime)
0 wscript.sleep 6 loop
oShell.run sCmdend if
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
joeSent: 08 October 2005 04:21To:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO
Permissions with .vbs
Now that I hav
PROTECTED] On Behalf Of Harding,
DevonSent: 07 October 2005 21:46To:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO
Permissions with .vbs
How would I use
schtask to assign to more than one computer. It seems like that may be
our only option.
I cant believe its
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Kamlesh
ParmarSent: Saturday, October 08, 2005 5:58 AMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] GPO Permissions
with .vbs
Interactive doesn't help in LOCALSYSTEM context for GUI apps, only CMD.EXE
canpop
:
[EMAIL PROTECTED]] On Behalf Of Harding, DevonSent: Friday, October 07, 2005 4:46 PM
To: ActiveDir@mail.activedir.orgSubject:
RE: [ActiveDir] GPO Permissions with .vbs
How would I use schtask to assign to more than one computer. It seems like that may be our only option.
I can't believe its
ity.
joe
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kamlesh
ParmarSent: Saturday, October 08, 2005 5:58 AMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] GPO Permissions
with .vbs
Interactive doesn't help in LOCALSYSTEM context for GUI apps, only CMD.E
To: ActiveDir@mail.activedir.orgSubject:
RE: [ActiveDir] GPO Permissions with .vbs
What is your OS? Is it a user specific task or a computer based task? If it is a task scheduled to run after the user logs on I'm sure it is permissions, or lack there of.
Tim Vander Kooi
Microsoft Systems
@mail.activedir.org
Subject: RE: [ActiveDir] GPO
Permissions with .vbs
I can't visualize why it
shouldn't work.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding,
Devon
Sent: Thursday, October 06, 2005
2:14 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO
Error messages? Do you get anything? Do you know for sure
the script is running?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Harding,
DevonSent: Friday, October 07, 2005 9:28 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO Permissions
with .vbs
Well
] GPO
Permissions with .vbs
Error messages? Do you
get anything? Do you know for sure the script is running?
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding,
Devon
Sent: Friday, October 07, 2005
9:28 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO
Is it running interactively first?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
joeSent: Friday, October 07, 2005 8:08 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO Permissions
with .vbs
Error messages? Do you get anything? Do you know for sure
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kamlesh Parmar
Sent: Friday, October 07, 2005
2:00 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] GPO
Permissions with .vbs
At.exe will always reqire admin rights, but normal user account can
always
it
as a startup script?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Harding,
DevonSent: Friday, October 07, 2005 11:28 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO Permissions
with .vbs
If I put this in the
Logon Scripts, it runs but just for local
---
I am always doing
that which I can not do, in order that I may learn how to do it. - Pablo
Picasso
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon
Sent: Friday, October 07, 2005
10:28 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO
@mail.activedir.org
Subject: RE: [ActiveDir] GPO
Permissions with .vbs
I tested several
scenarios:
1) batch file in startup
script in GPO with non-privileged user logging on job appeared in AT.
2) Your script in startup
script in GPO with non-privileged user logging on job appeared in AT.
3) Your
)
-Devon
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rich Milburn
Sent: Friday, October 07, 2005
12:11 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO
Permissions with .vbs
I tested several
scenarios:
1) batch file in startup
script in GPO with non
nt: Friday, October 07, 2005
2:00 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] GPO
Permissions with .vbs
At.exe will always reqire admin rights, but normal user account can
always schedule task using, Task Scheduler..
So use command line utility schtasks.exe, it should
@mail.activedir.orgSubject:
RE: [ActiveDir] GPO Permissions with .vbs
What
is your OS? Is it a user specific task or a computer based task? If it
is a task scheduled to run after the user logs on I'm sure it is
permissions, or lack there of.
Tim Vander Kooi
Microsoft Systems Administrator
Explorer Pipeline
From
Of Kamlesh Parmar
Sent: Friday, October 07, 2005
2:45 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] GPO
Permissions with .vbs
This is specific to opening the internet explorer with
higher privileges... (nothing to do with script runing at logon or startup)
If I knew
]
On Behalf Of Kamlesh
ParmarSent: Friday, October
07, 2005 2:45 PMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] GPO Permissions
with .vbs
This is specific to
opening the internet explorer with higher privileges... (nothing to do with
script runing at logon or startup)If I knew
a compelling reason to learn C# or VB.Net to me.
;)
Thanks,Brian Desmond
[EMAIL PROTECTED]
c -
312.731.3132
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
joeSent: Friday, October 07, 2005 9:02 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO Permissions
_vbscript_, that might be fun for people
who don't do perl.
joe
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian
DesmondSent: Friday, October 07, 2005 9:15 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO Permissions
with .vbs
This should be a piece
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO
Permissions with .vbs
What is your OS? Is it a
user specific task or a computer based task? If it is a task scheduled to run
after the user logs on I'm sure it is permissions, or lack there of.
Tim Vander Kooi
Microsoft Systems
not do, in order that I may learn how to do it. - Pablo
Picasso
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon
Sent: Thursday, October 06, 2005
9:48 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO
Permissions with .vbs
The problem
Itll only schedule tasks on logon
scripts, not startup. Someone correct me if Im wrong.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rich Milburn
Sent: Thursday, October 06, 2005
11:41 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO
Permissions
PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO Permissions
with .vbs
Itll only schedule
tasks on logon scripts, not startup. Someone correct me if Im
wrong.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Rich
MilburnSent: Thursday, October
06, 2005 11:41
I can't visualize why it shouldn't
work.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Harding,
DevonSent: Thursday, October 06, 2005 2:14 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO Permissions
with .vbs
Itll only schedule
tasks on logon scripts
Subject
Re: [ActiveDir] GPO problems
10/02/2005 08:50
PM
]
To: ActiveDir@mail.activedir.org
Sent: Monday, October 03, 2005 8:13 PM
Subject: Re: [ActiveDir] GPO problems
Hi Bagus..
In the GPO, Computer Configuration, Windows Settings, Security Settings,
File System, you can browse to the directory there, and assign rights.
Probably to *.*, I don't
..
Thank you,
Regards
BaGus
- Original Message -
From: [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Sent: Friday, September 30, 2005 8:20 PM
Subject: Re: [ActiveDir] GPO problems
Hello Bagus..
I believe Lotus Notes requires the user to have Modfiy rights to the
Notes\Data
Hello Bagus..
I believe Lotus Notes requires the user to have Modfiy rights to the
Notes\Data directory. You can assign this with a GPO, if you wish.
The sharing, I'm wondering if you have simple file sharing turned on? It's
in explorer, tools, folder options, view, uncheck the box that says
to
ActiveDir@mail.activedir.org
To
ActiveDir@mail.activedir.org
cc
Subject
RE: [ActiveDir] GPO Restricted
Groups gotchas ?
Yeah we need a good search mechanism
for this list, this was discussed nearly to death last year or the year
before when that functionality change
I think the way I'd approach it is to build a script that
checks users for roaming profiles, and puts them in a security group if they do.
Schedule the script to run on a regular basis. Then use the security group for
GPO filtering.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Thanks for the input. Will try that.
Rgds
Coleman, Hunter
[EMAIL PROTECTED]
Sent by: [EMAIL PROTECTED]
27/09/2005 09:56 PM
Please respond to
ActiveDir@mail.activedir.org
To
ActiveDir@mail.activedir.org
cc
Subject
RE: [ActiveDir] GPO filtering by properties
of User Object
Worked like a
charm!
You have the possibility to use
Member option and/or memberof option
Using the member option you
ENFORCE (or replace) which objects (users/groups) are a member of a group. If
you add an object as a member of the group and it is not on the restricted
groups list, it
AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO Restricted
Groups gotchas ?
Worked like a
charm!
You have the possibility to use
Member option and/or memberof option
Using the member option you
ENFORCE (or replace) which objects (users/groups) are a member of a group. If
you
, September 23, 2005 2:42 AMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] GPO Restricted
Groups gotchas ?
But then it defeats the purpose of restricted group, as you want to be sure
that, only known members are part of the restricted group. If the operation is
merge than
is
then oout.
Roger Seielstad
E-mail Geek
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Kamlesh Parmar
Sent: Friday, September 23, 2005 2:42 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] GPO Restricted Groups
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kamlesh Parmar
Sent: Saturday, September 24, 2005 2:56 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] GPO Restricted Groups gotchas ?
I agree it would be better to give that option of append
But then it defeats the purpose of restricted group, as you want to be sure that, only known members are part of the restricted group. If the operation is merge than it is not restrictedby definition?
When u ask for merge or append, you are doing some group membership modification.You better use
PROTECTED] On Behalf Of Crawford, Scott
Sent: Thursday, August 25, 2005 10:03 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO on XP 2000 Pro
Here is such a script. Just unrem the correct strOS line that you're
working with and set strSource and strDestination to the correct
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Crawford, Scott
Sent: Thursday, August 25, 2005 10:03 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO on XP 2000 Pro
Here is such a script. Just unrem the correct strOS line that you're
working with and set strSource
Title: RE: [ActiveDir] GPO on XP & 2000 Pro
Actually my point was less around the initial organization
of AD than around changing an AD design to accomodate short-term requirements. I
am all for the approach you've described below if it meets the administrative
and business n
, 2005 5:19 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO on XP 2000 Pro
I'd create the Workstations OU and the Servers OU. Then write a script
that looks at each of the machines in the computers container, and based
on what you find in the operatingSystem attribute have
Title: RE: [ActiveDir] GPO on XP 2000 Pro
Most of what Ive seen is that they first
organize by Geo then by organizationally (or the other way round) then further divide
the objects by roles like Mobile users, Desktops, service accounts, de-provisioned
users etc.
I cant image organizing
WMI filters aren't processed by Win2K so that won't work on that
platform. Your best bet is probably to put all the XP win2k machines
in one security group and then security filter the GPO based on that
group (i.e. remove the Authenticated Users ACE from the sec. filter on
that GPO and add the
WMI filters don't work for windows 2000 (server or professional). Create
separate Ous for your servers and for your workstations. Link your GP
to the workstation OU.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon
Sent: Wednesday, August
Is there any reason why you can't put the workstations and servers in
separate OUs and then link the GPO to the OU that contains the
workstations? If this is not possible then you might consider group
filtering, i.e. put all servers in a group and exclude them from the
policy.
Tony
I have over 2000 machines in my computers containers. Is there any
other way?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia
Sent: Wednesday, August 24, 2005 5:53 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO on XP
1 - 100 of 418 matches
Mail list logo
