You could do what we do - just replace the local machine policies each time you 
rev the policy set. They're stored in c:\windows\system32\grouppolicy.

Using gpscript.exe (Google for it, don't have a specific site) you can dump the 
contents of either registry.pol file to text. You can also recombine textfiles 
back into a .pol file, and subsequently rev the gpt.ini file so your new .pol 
files are utilized. Finding the registry paths to GPOs will take some digging 
in ADM templates, but if you open the templates with Wordpad you can search for 
the description you're looking for, and eventually figure out how to format the 
registry entry.

For example, gpscript.exe will dump GPOs like this:

/KEY:"Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate"
/VALUE:"DisableWindowsUpdateAccess"
/TYPE:REG_DWORD
/DATA:D 0x00000001
/SET

The KEY value is relative to HKCU or HKLM, depending on whether you're dumped 
the machine or user policy. The above entry is from user, and disables access 
to Windows Update.

It's not as slick or easy as AD, but it's certainly cheaper, especially if you 
don't rev your policies that often.

Ryan

>>> "Urs Rau" <[EMAIL PROTECTED]> 12/7/2006 2:52 PM >>>
Thanks Michael,

On 12/6/06, Michael Schurter <[EMAIL PROTECTED]> wrote:
> Urs Rau wrote:
> > We have two basic needs that demand we now introduce active directory
> > servers to our previously 'windows server free' office. One we want to
> > manage the windows xp sp2 desktops using group policies and secondly
> > we have a need to start using shared calendaring.
> >
> > Alternatively, I would also welcome any suggestions that would allow
> > us to use microsoft outlook shared calendaring and enable us to manage
> > the windows xp workstations using group  policies, using any other
> > configuration, preferably open source of course. ;-)
>
> Group Policy Management in Samba:
>
> http://samba.org/samba/docs/man/Samba-HOWTO-Collection/PolicyMgmt.html 
>

Not sure if I am missing the trees for the forrest but to me that page
seems to support my conclusion. That if I want to use Group Policy
features with Samba I _do need_ active directory. I could try to use
the older NT4 style System Policies but that is not what I am after, I
am after using the _Group_ Policy features that only come with using
active directory? Or did I miss something?

-- 
Urs Rau
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba 

-------------------------------------------------

This email transmission and any documents, files or previous

email messages attached to it may contain information that is

confidential or legally privileged. If you are not the intended

recipient, you are hereby notified that any disclosure, copying,

printing, distributing or use of this transmission is strictly

prohibited. If you have received this transmission in error,

please immediately notify the sender by telephone or return

email and delete the original transmission and its attachments

without reading or saving in any manner.



The Evangelical Lutheran Good Samaritan Society.

---------------------------------------------------------
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to