RE: [ActiveDir] I have lost a policy setting, somewhere.

[Darren Mar-Elia]

Its the same policy on Win2K as 2K3 or XP--just with a fancier name. Steve, one possiblity is that this policy was set on a GPO and delivered to your computer and then the GPO was removed, but the policy remained "stuck". One thing you might check is to look in a folder called c:winnt\security\templates\policies on the Win2K and see if you see a file called gpt*.inf. Then look in that file for a section under Registry Values that says something like this: MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\AutoDisconnect if that is all this file contains, just nuke it and then do a secedit /refreshpolicy. It may not be in this file--check the other files in that folder for that registry value and remove it if you find it. That should prevent it from being delivered by policy and then you can modify it as you see fit.     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Sullivan Sent: Tuesday, January 11, 2005 3:41 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] I have lost a policy setting, somewhere. Just as a level check…   Client XP SP2, domain 2k3 My local policy is set to 15 minutes. The Default Domain Policy is blank.   I see the setting in all places… it is called [Console Root\Default Domain Policy [mom2k5.NIHITO.dom] Policy\Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Amount of idle time required before suspending session] (Thanks Darren for the GPOGuyCopyNodePath… makes that a lot easier!)   What OSs are you using? Could the “Microsoft network server” throw it off? Hmmm…   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Shaff Sent: Tuesday, January 11, 2005 5:45 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] I have lost a policy setting, somewhere.   Yeah.. I already try this.. That is what is SO FRUSTRATING…  It is like the policy does not exist, but…  There it is on the client….   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Tuesday, January 11, 2005 1:40 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] I have lost a policy setting, somewhere.   Or, here is the newer version:   http://www.microsoft.com/downloads/details.aspx?FamilyId=7821C32F-DA15-438D-8E48-45915CD2BC14&displaylang=en   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Shaff Sent: Tuesday, January 11, 2005 3:44 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] I have lost a policy setting, somewhere.   It does.  However, it does not tell me the location of this specific policy.  I ran gpresult /v, which gave me everything but what I needed.   S     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ertug Gurhan Sent: Tuesday, January 11, 2005 10:28 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] I have lost a policy setting, somewhere.   gpresult should tell you what and where you are getting gPO settings.   Cheers ----- Original Message ----- From: Steve Shaff To: ActiveDir@mail.activedir.org Sent: Tuesday, January 11, 2005 1:21 PM Subject: [ActiveDir] I have lost a policy setting, somewhere.   Group, I have a policy on a local Windows 2000 server which is being set (apparently) from the domain policy. But, I can not find it.  The policy is "Amount of idle time required before disconnecting session" under the local security settings, local policy, security options.  However, I can not find that specific policy under the domain policy, in order to change it.  Does anyone know where it may be located on the domain policy? Thanks, S List info   : http://www.activedir.org/mail_list.htm List FAQ    : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/