John,
The native way to create a GPO is to right click on an OU and select properites
and then select the Group Policy Tab, the easiest way to create and manage
GPO's is to use the GPMC which you can download from www.microsoft.com
Regards,
Mark Parris
Base IT Ltd
Active Directory Consult
If you have GPMC installed, then the GP tab is removed from ADU&C and you'll
need to manage GP from the GPMC.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John
Sent: Tuesday, December 12, 2006 8:16 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] group policy object
you are experiencing morphed folders within the
SYSVOL.
see:
MS-KBQ328492_Folder Name Is Changed to
FolderName_NTFRS_
MS-KBQ290762_Using the BurFlags registry key to reinitialize File
Replication Service replica sets (depending on
the situation this solution may need additional
s
1) Log errors checked?
2)NTFS permissions on Sysvol checked?
3) DNS checked?
4) Go to a client and run GPRESULT.exe?
5) Ran DNSDiag.exe?
6) Other GPOs work?
-Z.V.
Lloyd Williams wrote:
The problem I am having
with group policies has the
following two symptoms
1)
do
ubject: RE: [ActiveDir] Group Policy
won't rerun
Is there anything else I should try to get this
going?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darren
Mar-EliaSent: Friday, July 14, 2006 4:22 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Policy
won
gging ( if we are getting that
far ) q223300
steve
- Original Message -
From:
Stu
Packett
To: ActiveDir@mail.activedir.org
Sent: Friday, July 14, 2006 5:13 PM
Subject: RE: [ActiveDir] Group Policy
won't rerun
Is there anything else I should try t
Title: Group Policy won't rerun
Is there anything else I should try to get this
going?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darren
Mar-EliaSent: Friday, July 14, 2006 4:22 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Policy
won't r
tSent: Friday, July 14, 2006 7:13 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Policy
won't rerun
I uninstalled via Add/Remove Programs. I thought
that doing it that way would lead to problems, so I have ghosted the laptop
and kept the same computer name.
]
[mailto:[EMAIL PROTECTED] On Behalf Of Darren
Mar-EliaSent: Friday, July 14, 2006 3:37 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Policy
won't rerun
Stu-
When you uninstalled, did you do it through GP or by
removing from Add/Remove Programs? If the latter, than that
ECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darren
Mar-EliaSent: Friday, July 14, 2006 3:37 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Policy
won't rerun
Stu-
When you uninstalled, did you do it through GP or by
removing from Add/Remove Programs? If the latter, th
Title: Group Policy won't rerun
Stu-
When you uninstalled, did you do it through GP or by
removing from Add/Remove Programs? If the latter, than that is your problem.
Doing that leaves metadata in the registry related to the GP-deployed app that
the Software Installation CSE is probably still
Title: Group Policy won't rerun
By the way, the errors would be in the
Application log on the client, not the server.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stu Packett
Sent: Friday, July 14, 2006 5:17
PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveD
Title: Group Policy won't rerun
Are you seeing any errors in the event
log? If you right-click on the Software Package, there is an option to
Redeploy the application. You may want to try that.
Kevin
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stu Pack
Various 3rd party offerings are available in this space.
NetIQ, Quest, ScriptLogic and NetPro, for example, offer tools in this
area.
They can be used to grant users permissions to make 'offline' GPO
changes, which are then approved by an admin and deployed into prod by a
service account.
Natura
rom: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> [EMAIL PROTECTED]
> Sent: Monday, June 26, 2006 2:17 PM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] Group Policy question
>
> Hi Larry...
>
>
> http://technet2.microsoft.com/Windo
Do they know more about GPO than you? Than give them the rights. Make
their work easier..and probably yours. What are you afraid of? That
someone will go wild on GPO and abuse your AD? Than turn on auditing.
-Z.V.
Larry Wahlers wrote:
Colleagues,
Our Microcomputer Support group wants the ab
Hi Larry...
http://technet2.microsoft.com/WindowsServer/en/Library/a834e844-8eb2-4ee2-927c-9989b4f55dd71033.mspx?mfr=true
You can easily use the GPMC to delegete where they can link them, just
click the OU, and the delegate tab.
HTH,
John
GPOs only apply to users and/or computer accounts and
nothing else!
Said in another way: the objects to be managed (users
and/or computers) must fall within the scope of management (SOM) of a GPO that
is linked to some OU (the objects must be directly in the OU the GPO is linked
to or in a s
2006 12:04
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group
Policy not working?!
Will need to be the user object….
Not security groups. You can use sec groups to filter.
Robert Rutherford
QuoStar
Solutions Limited
The
Will need to be the user object…. Not
security groups. You can use sec groups to filter.
Robert Rutherford
QuoStar
Solutions Limited
The Enterprise
Pavilion
Fern Barrow
Wallisdown
Poole
Dorset
BH12 5HH
Hi James...
There are a couple articles warning against using Domain Local groups for
policies.
Can you try having them put in a global group in their own domain, and
adding that directly to the read and apply section of the policy?
http://support.microsoft.com/kb/309172/en-us has some info.
Jo
Matt-
Yes. When focused on a particular GPO, select the Scope tab in the
right-hand results pane, and then there will be a section called
Security Filtering where you can modify groups that have this permission
set.
Darren
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTE
: RE: [ActiveDir] group policy creator owners
That would allow the setting of 'block inheritance' and 'force
inheritance' and the like.
gpLink merely grants rights to link GPOs to the OU.
I'm sure Darren will fill in the large blanks left by me, again :)
neil
-O
[mailto:[EMAIL PROTECTED] On Behalf Of Graham Turner
Sent: 09 March 2006 15:44
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] group policy creator owners
thanks both for views on this which make a whole load of sense
i think how i am to proceed is to leave the 'domain admins'
EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> [EMAIL PROTECTED]
> Sent: Thursday, March 09, 2006 3:52 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] group policy creator owners
>
> When created, a new GPO will *not* inherit rights from the parent
e.
Darren
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Thursday, March 09, 2006 3:52 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] group policy creator owners
When created, a new GPO will *not* inherit rights from the
When created, a new GPO will *not* inherit rights from the parent (if we
examine SYSVOL perms, for example).
You may assign user1 and user2 the rights to create GPOs in the domain
(using GPMC) but each user will need to grant other users the right to
edit 'their' GPO.
FWIW, I think this is a bad
Title: Group Policy Trusted Sites
User Configuration -> Administrative
Templates -> Internet Explorer -> Internet Control Panel -> Trusted
Sites Zone Template
Is this what you are referring to? Your
question was a little vague.
Doug Ferguson
Windows Systems Administrator
Hynix
Alex-
There are a variety of causes for these errors. They are kind of
catch-alls for a client's inability to access the SYSVOL portion of a
GPO. Here are some things to look for:
--TCP/IP Netbios Helper service not running on client (needs to be)
--DNS not properly configured on client to resolve
ill do the trick) to take effect after making the reg change.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jeff Salisbury
Sent: Friday, October 28, 2005 9:09 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy Object for Window
machine to use domain mode by
modifying a connection's domain name to match your corporate network's
domain name.
Jeff
-Original Message-
From: Darren Mar-Elia [mailto:[EMAIL PROTECTED]
Sent: Friday, October 28, 2005 8:34 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [Act
:34 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy Object for Windows Firewall
Just an FYI on this. "On the Domain" can be tricky here. For example. If
your user is connected to the corporate network via VPN, they will be
considered "off the domain" and will use
lowing
article:
http://www.microsoft.com/technet/community/columns/cableguy/cg0504.mspx
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley,
CPA aka Ebitz - SBS Rocks [MVP]
Sent: Friday, October 28, 2005 7:44 AM
To: ActiveDir@mail.activedir.org
Subject: R
www.sbslinks.com/group.htm [that's SBS's group policy settings for the
XP sp2 firewall]
Domain is when you are 'on' the domain
Standard is when the device is unattached.
Also grab the XP sp2 security documents that were just released on the
web a few days ago.
Todd Hofert wrote:
I am impl
modifications to the firewall
settings.
Cheers
Ken
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Hofert
Sent: Friday, 28 October 2005
10:27 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group
Policy Object for Windows Firewall
Peter
:20 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Policy
Object for Windows Firewall
The difference between
the two profiles is that the domain profile is applied when the OS detects that
the machine is in one of your domain’s networks. When it detects that it is
outside of
If the machine detects domain controllers on the network, it'll use the
domain profile. Otherwise it uses the standard profile. You could have a more
relaxed policy when the machine is "on the local LAN", and a tighter policy
when the machine (presumably a laptop) is roaming on non-managed networks
The difference between the two profiles is
that the domain profile is applied when the OS detects that the machine is in
one of your domain’s networks. When it detects that it is outside of your
network the standard profile is applied. I would recommend that your use both
profiles and make
]
[mailto:[EMAIL PROTECTED] On Behalf Of Jerold Schulman
Sent: Wednesday, October 26, 2005 11:08 AM
To: ActiveDir@mail.activedir.org
Subject: Re: Re: [ActiveDir]Group Policy Administrative Templates
The PolicyMaker(tm) Registry Extension freeware works great.
On Wed, 26 Oct 2005 23:20:41 +0530
The PolicyMaker Registry Extension freeware works great.
On Wed, 26 Oct 2005 23:20:41 +0530, you wrote:
>I found this free registry GP CSE
>
>at http://www.desktopstandard.com/PolicyMakerRegistryExtension.aspx
>
>some of the feature it touts are
>** Full control over tattooing ( i.e. means each
I found this free registry GP CSE
at http://www.desktopstandard.com/PolicyMakerRegistryExtension.aspx
some of the feature it touts are
* Full control over tattooing ( i.e. means each setting becomes a policy and not preference)
* Registry Wizard for settings import
* Per-setting filtering
* in
There's a few free and for pay tools to do it. Check out
the following:
RegtoADM: turns .reg files into ADMs. Free
tool that is part of the NUTS utilities at http://yizhar.mvps.org/
ADM TEmplate Editor: This is a for pay
tool found at http://www.sysprosoft.com/adm_summary.shtml
Policy T
:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia
Sent: Thursday, September 29, 2005 4:48 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy processing aborted
Could be a network stack timing issue. The KB article below applies to
Win2K and XP but doesn't say whether it explicit
: Thursday, September 29, 2005 4:48 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy processing aborted
Could be a network stack timing issue. The KB article below applies to
Win2K and XP but doesn't say whether it explicitly is supported in 2K3.
However, it might be
Could be a network stack timing issue. The KB article below applies to
Win2K and XP but doesn't say whether it explicitly is supported in 2K3.
However, it might be worth trying since this problem is common and this
registry hack can help in some of these cases.
http://support.microsoft.com/default
Hi Susan,
Not a stupid question. Especially when you are just starting out with
Group Policy the filtering can be a bit tricky.
So the default for filtering is Authenticated Users have Read and Apply
Group Policy permissions. If you remove Authenticated Users from the
list and only add the Group(
Hi Susan
Have a look at this reference for information on group filtering.
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/S
erverHelp/c8d44e87-5bf4-41e5-aff3-9ca261267181.mspx
Tony
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Susan,
You can restrict GPOs to certain groups by using either Deny or Allow
permissions. So in your case you could deny a particular security group
access to the GPO. If you leverage the GPMC you can use the delegation
tab to explicitly deny a groups access to the GPO.
As for diagramming, I de
s Engineer
Essex Credit / Brickwalk
510 595 5083
**
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> Steve Rochford
> Sent: Tuesday, September 13, 2005 10:13 AM
> To: ActiveDir@mail.activedir.org
> Subjec
> I've set the IE home page to our intranet, which is the only
> site allowed; everything else goes to a bit-bucket proxy. So in:
> User config\windows settings\internet explorer
> maintenance\URLs\Important URLs, I've set the home page. But
> it doesn't work. With a new user login, IE starts by
ptember 07, 2005 3:06 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group policy security setting
OK; I finally figured this one out; I had to set a couple of other settings
for this to work.
Computer config\admin templates\Internet explorer\internet control
panel\sec
ROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> Roger Seielstad
> Sent: Friday, September 02, 2005 9:57 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Group policy security setting
>
> The other way that works is to add the UNC for the file server
>
Charlie,
I'm wondering whether you tried to specify this setting through the Internet Explorer Maintenance\Security\Security Zones and content Ratings\. There you can actually edit the setting you're looking for.
Oliver Ryf
Quest
Cologne
List info : http://www.activedir.org/List.aspxList FAQ
Hi Charlie,
If it is a user registry setting (other than Binary) there should be no
problem with a custom ADM template.
Can you explain what registry key it is and exactly what is not working?
Alan Cuthbertson
- Original Message -
From: "Charlie Kaiser" <[EMAIL PROTECTED]>
To:
Sent: S
The other way that works is to add the UNC for the file server
(file://server/share) to the Trusted Sites, under
User Config / Windows Settings / IE Maintenance /Security / Security Zones
and Content ratings
Now that I look, there's the setting you're trying to change - which is why
it probably d
Is the corresponding Registry value a type of reg_binary? If so you can't
set it via an ADM. You would need to use an alternate method to update each
user's Registry like via a login script.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> Charli
Subject: RE: [ActiveDir] Group Policy delays
Check the event logs on the ones which are *not* having a problem. It
may be that for some reason they are not applying group policies - this
will then make them start up quickly (ie "normal" behaviour is slow
because of the security profile setting
m).
Steve
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Gary Clark
> Sent: 03 August 2005 11:12
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Group Policy delays
>
> Hi Neil,
>
> Thanks some long for
- 312.731.3132
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gary Clark
Sent: Wednesday, August 03, 2005 5:12 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy delays
Hi Neil,
Thanks some long forgotten security profile settings seem
---
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ruston, Neil
Sent: 03 August 2005 09:43
To: 'ActiveDir@mail.activedir.org'
Subject: RE: [ActiveDir] Group Policy delays
- Are your subnets and sites defined correctly? If not, clients may
authenticate a
- Are your subnets and sites defined correctly? If not, clients may
authenticate and process GPOs from DCs across slow WAN links.
- Does your GPO contain lots of registry and/or file DACL/SACL settings? This
could account for the slow processing.
neil
-Original Message-
From: [EMAIL
Hi Brenda
If it's not part of the standard policy options, you could create your
template and modify the location of the Temporary Internet Files using
registry keys as described in this article.
http://windows.about.com/od/tipsarchive/l/bltip182.htm
See Matty's Group Policy FAQs for information
une 23, 2005 9:46 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group policy question
Rick; I sent you the file offlist. I just rebooted the machine and still
have the same problem. Back to the drawing board...
I wanted to run gpresult, but since I can't get to anything on the
MAIL PROTECTED] On Behalf Of Rick Kingslan
> Sent: Thursday, June 23, 2005 6:17 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Group policy question
>
> Charlie,
>
> Can you post the rest of the USERENV log? There should be
> some more lines
> after the
Charlie,
Can you post the rest of the USERENV log? There should be some more lines
after the:
USERENV(e8.8338) 17:04:15:113 GetDeletedGPOList: Finished.
For all intents and purposes, the call CheckForGPOsToRemove does exactly
what it says. They next line enumerates the GPOs that need to be rem
Hii,
I guess your solution of disabling firewall via GPO
lies in this link.
http://msmvps.com/kwsupport/archive/2004/08/27/12477.aspx
Dibendoo
--- tech <[EMAIL PROTECTED]> wrote:
> Hello,
>
>
>
> I wanted to know where the template files (.adm)
> files of default domain
> group policy is
>From Group Policy Editor, drill down to administrative templates and
then right click. Select Add or remove administrative templates
Regards
Peter
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activ
@mail.activedir.org
Subject: Re: [ActiveDir] group policy adm files
Roseta
.adm files are found in
%systemroot%\inf
Regards
Peter
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir
Roseta
.adm files are found in
%systemroot%\inf
Regards
Peter
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Group
Policy Not working
Hi Christine,
Seems like it should work!
I always find the UserEnv.Log is a good place to start. If you activate
Detailed logging, then logon to the workstation it provides detailed info in
the
I would think you could use a batch file with only "cscript
scriptname.vbs"
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Charlie Kaiser
Sent: Friday, April 29, 2005 9:39 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group
TED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> Christine Allen
> Sent: Friday, April 29, 2005 6:50 AM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Group Policy Not working
>
> Thanks to all for your help. We resolved the issue. Turns
> out (I have no idea
veDir@mail.activedir.org'Subject: RE:
[ActiveDir] Group Policy Not working
The
script runs in the background and I do not see it run.
I
copied the VBS script to the local computer and when I try to run it, it opens
the script to view the language it does not run.
Nothing in event v
tivedir&f=policyreporter.shtml
- Original Message -
From:
Christine Allen
To: 'ActiveDir@mail.activedir.org'
Sent: Friday, April 29, 2005 2:03
AM
Subject: RE: [ActiveDir] Group Policy Not
working
It's
below
. If it is present, it should have the
information you need to do further debugging.
Jeff
From: Christine Allen
[mailto:[EMAIL PROTECTED] Sent: Thursday, April 28, 2005
9:49 AMTo: 'ActiveDir@mail.activedir.org'Subject: RE:
[ActiveDir] Group Policy Not working
The
scrip
Microsoft antispyware?
Norton antivirus?
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Christine
AllenSent: Thursday, April 28, 2005 9:49 AMTo:
'ActiveDir@mail.activedir.org'Subject: RE: [ActiveDir] Group Policy
Not working
The
script runs in the background and I do not see it run.
I
copied the VBS script to the loc
in there.
What
locally could be preventing the script from running?
Thanks
for your help!
-Original Message-From: Peter Jessop
[mailto:[EMAIL PROTECTED]Sent: Thursday, April 28, 2005 12:20
PMTo: ActiveDir@mail.activedir.orgSubject: Re:
[ActiveDir] Group Policy Not
Does the script not run or does it run but not properly?
Are there any clues in the event log?
Can you run the script manually from the workstation?
Are they receiving the GP over a WAN?
EMAIL PROTECTED]Sent: Thursday, April 28, 2005
11:44 AMTo: ActiveDir@mail.activedir.orgSubject: RE:
[ActiveDir] Group Policy Not working
What does GPresult
return?
De :
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
De la part de
Christine
The first thing you should check is to see if the GP is being applied.
You can do this on w2K by running gpresult on the hosts where it's not
working. You should also check they do not have script blocking
software installed.
Regards
Peter Jessop
What does GPresult return?
De :
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Christine Allen
Envoyé : Thursday, April 28, 2005 11:35 AM
À :
'ActiveDir@mail.activedir.org'
Objet : [ActiveDir] Group
Policy Not working
Hello,
My environment is win
Thanks
all. That's what I thought.
-Original Message-From: Gilbert, Daniel L Mr
ANOSC/FCBS [mailto:[EMAIL PROTECTED]Sent:
Tuesday, April 19, 2005 10:53 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group
Policy
I always thought
password polici
It will only affect the local password policy of
the workstations that are in that OU. It has not affect on the domain
password settings. It will only change the local password
requirements. There is only one password policy per domain.
- Original Message -
From:
Christi
I always thought password policies at the
OU, will only affect the local accounts on computers.
Dan
-Original Message-
From: Christine Allen
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, April 19, 2005 7:41
AM
To: 'ActiveDir@mail.activedir.org'
Subject: [ActiveDir] Group Policy
Even though you can change the policy, it won't affect the actual password policy that you specified on the domain
level. Your thought is right.
-Oliver
runIT AG
Zuerichstrasse 98
8600 Duebendorf
Switzerland
On Tue, 19 Apr 2005 10:40:56 -0400
Christine Allen <[EMAIL PROTECTED]> wrote:
Can someon
It
affects the use of local machine account passwords, i.e. - those accounts in the
SAM of the domain member.
--Dean WellsMSEtechnology* Email: dwells@msetechnology.comhttp://msetechnology.com
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Christine
AllenSent: Tuesday, Ap
: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Group policy management console
George Arezina wrote:
> Has anyone run into this warning and/or error while using GPMC?
One tip - If You have message box with error statement You don't have to
make screenshoot - just press CTRL+C on
George Arezina wrote:
Has anyone run into this warning and/or error while using GPMC?
One tip - If You have message box with error statement You don't have to
make screenshoot - just press CTRL+C on this box and error message will
be placed in Your clipboard - then You can past it into e-mail or
I think you need to update your
Group Policy ADM Files.
You can download them from
http://www.microsoft.com/downloads/details.aspx?FamilyID=92759d4b-7112-4b6c-ad4a-bbf3802a5c9b&DisplayLang=en
Peter Jessop
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedi
Separate GPO might be your best workaround.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Hunter, Laura E.
Sent: Tuesday, March 01, 2005 11:21 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy weirdness (or maybe 2K/2K3 interop
> What version is your 2K DC up to? Is it SP4?
SP4, yes indeed.
>
> That aside, I would expect a setting of 1 to prevent enumeration per
> http://support.microsoft.com/kb/246261
I've never had any luck with a setting of 1. "2" has been the only
setting that has prevented enumeration on any 2K
What version is your 2K DC up to? Is it SP4?
That aside, I would expect a setting of 1 to prevent enumeration per
http://support.microsoft.com/kb/246261
Upgrading would not be a bad idea if that's possible.
I'm just wondering is that all the settings needed to prevent the anonymous
enumeration
admin pak installed.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Mulnick,
AlSent: Monday, January 31,
2005 9:52 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir]Group Policy
editor
What were you expecting
to see? Some of the options will only show up
PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir]Group Policy editor
No these are not the admin templates. These are like I cannot see the options
for internet maintenance wizard, startup and shutdown script, Folder
redirection.. Nothing except Remote installation service. This
.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al
Sent: Monday, January 31, 2005
9:52 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir]Group
Policy editor
What were you expecting to see? Some
of the options will only show up from a machine that
What were you expecting to see? Some of the options
will only show up from a machine that has that software loaded. An example
of that is the Windows Firewall settings which are found when connecting via XP
SP2 workstation but not from the server console.
Is that possible in this case?
And of course:
www.gpoguy.com
www.gpanswers.com
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tim
HinesSent: Wednesday, January 12, 2005 6:50 AMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Group
Policy
You will find tons of GP resources at http
You will find tons of GP resources at http://www.microsoft.com/windowsserver2003/technologies/management/grouppolicy/default.mspx
or http://www.microsoft.com/windows2000/technologies/management/default.asp#section10
- Original Message -
From:
Mohammed
Tantawi
To: Active
Happy readings … make sure to take a
couple of weeks of ;-)
http://searchwin2000.techtarget.com/originalContent/0,289142,sid1_gci966312,00.html
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Mohammed Tantawi
Sent: woensdag 12 januari 2005
14:25
To: ActiveDir
1 - 100 of 283 matches
Mail list logo
