DCPolFix http://tinyurl.com/4kk2aze
From: Sean Rector [mailto:[email protected]] Sent: Monday, February 14, 2011 10:44 AM To: NT System Admin Issues Subject: RE: (un)Enforcing Default Domain Policy I'd love a copy of those scripts - can you point us to them? The DDP was modified before I got here. I've been modifying GP using individual GPO's but I'd really like to have DDP reset. Sean Rector, MCSE From: Kennedy, Jim [mailto:[email protected]] Sent: Monday, February 14, 2011 10:41 AM To: NT System Admin Issues Subject: RE: (un)Enforcing Default Domain Policy Good plan. DDP should be left alone in my humble opinion. MS support has some scripts to reset it to default after you get done. From: Guyer, Don [mailto:[email protected]] Sent: Monday, February 14, 2011 10:39 AM To: NT System Admin Issues Subject: RE: (un)Enforcing Default Domain Policy I agree. Reviewing that policy shows no settings regarding Proxy. There's not a lot of settings in the DDP, so I'm going to push the idea of creating a smaller number of GPOs to replace it with. Don Guyer Windows Systems Engineer Datasafe Platform Fiserv Enterprise Technology Fiserv [email protected]<mailto:[email protected]> Office: 1-800-523-7282 x 1673 Fax: 610-293-4499 www.fiserv.com<http://www.fiserv.com/> From: Kennedy, Jim [mailto:[email protected]] Sent: Monday, February 14, 2011 10:34 AM To: NT System Admin Issues Subject: RE: (un)Enforcing Default Domain Policy Then there has to be a setting in the DDP that is overwriting it. From: Guyer, Don [mailto:[email protected]] Sent: Monday, February 14, 2011 10:32 AM To: NT System Admin Issues Subject: RE: (un)Enforcing Default Domain Policy Just did that. Proxy is there when denying DDP, not there after I took out the explicit deny. Don Guyer Windows Systems Engineer Datasafe Platform Fiserv Enterprise Technology Fiserv [email protected]<mailto:[email protected]> Office: 1-800-523-7282 x 1673 Fax: 610-293-4499 www.fiserv.com<http://www.fiserv.com/> From: Kennedy, Jim [mailto:[email protected]] Sent: Monday, February 14, 2011 10:27 AM To: NT System Admin Issues Subject: RE: (un)Enforcing Default Domain Policy Can you get a machine in the remote location into a test OU and go from there? From: Guyer, Don [mailto:[email protected]] Sent: Monday, February 14, 2011 10:25 AM To: NT System Admin Issues Subject: RE: (un)Enforcing Default Domain Policy Yes, I'm following. The issue we're having is we're trying to configure Internet proxy settings in one domain, where the physical hardware is at 2 different locations. The new GPOs for these Proxies are not working, at the OU level. There are no settings in the DDP for Proxy. I just explicitly denied my user account Read and Apply access to the DDP and the Proxy settings are there. That means that even though there are no proxy settings in the DDP, it is somehow overriding. Thx, Don Guyer Windows Systems Engineer Datasafe Platform Fiserv Enterprise Technology Fiserv [email protected]<mailto:[email protected]> Office: 1-800-523-7282 x 1673 Fax: 610-293-4499 www.fiserv.com<http://www.fiserv.com/> From: Jonathan Link [mailto:[email protected]] Sent: Monday, February 14, 2011 10:17 AM To: NT System Admin Issues Subject: Re: (un)Enforcing Default Domain Policy If you unenforce a GPO, subsequent GPO's can overwrite the settings. That's the actually meaning of enforced, not allowing settings to be overwritten by GPO's in OU's below the GPO which is enforced. Does that make sense? It does to me, but I have a head cold and a lack of sleep trying to get something done... On Mon, Feb 14, 2011 at 9:35 AM, Guyer, Don <[email protected]<mailto:[email protected]>> wrote: Everyone, We are troubleshooting a GPO issue and would like to remove the enforced setting on our Default Domain Policy GPO. I am just looking for assurance that this will not break anything, or remove it from being applied to OUs that it is currently applied to. Thx, Don Guyer Windows Systems Engineer Datasafe Platform Fiserv Enterprise Technology Fiserv [email protected]<mailto:[email protected]> Office: 1-800-523-7282 x 1673 Fax: 610-293-4499 www.fiserv.com<http://www.fiserv.com/> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin Information Technology Manager Virginia Opera Association E-Mail: [email protected]<mailto:[email protected]> Phone: (757) 213-4548 (direct line) {+} Subscriptions and tickets are on sale now! The Valkyrie | Madama Butterfly Visit us online at www.VaOpera.org<http://www.vaopera.org/> or call 1-866-OPERA-VA The vision of Virginia Opera is to enrich lives through the powerful integration of music, voice and human drama. ________________________________ This e-mail and any attached files are confidential and intended solely for the intended recipient(s). Unless otherwise specified, persons unnamed as recipients may not read, distribute, copy or alter this e-mail. Any views or opinions expressed in this e-mail belong to the author and may not necessarily represent those of Virginia Opera. Although precautions have been taken to ensure no viruses are present, Virginia Opera cannot accept responsibility for any loss or damage that may arise from the use of this e-mail or attachments. {*} ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
