If you have GPMC installed, then the GP tab is removed from ADUC and you'll
need to manage GP from the GPMC.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John
Sent: Tuesday, December 12, 2006 8:16 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] group policy object
John,
The native way to create a GPO is to right click on an OU and select properites
and then select the Group Policy Tab, the easiest way to create and manage
GPO's is to use the GPMC which you can download from www.microsoft.com
Regards,
Mark Parris
Base IT Ltd
Active Directory
1) Log errors checked?
2)NTFS permissions on Sysvol checked?
3) DNS checked?
4) Go to a client and run GPRESULT.exe?
5) Ran DNSDiag.exe?
6) Other GPOs work?
-Z.V.
Lloyd Williams wrote:
The problem I am having
with group policies has the
following two symptoms
1)
domain
you are experiencing morphed folders within the
SYSVOL.
see:
MS-KBQ328492_Folder Name Is Changed to
FolderName_NTFRS_
MS-KBQ290762_Using the BurFlags registry key to reinitialize File
Replication Service replica sets (depending on
the situation this solution may need additional
: [ActiveDir] Group Policy
won't rerun
Is there anything else I should try to get this
going?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darren
Mar-EliaSent: Friday, July 14, 2006 4:22 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Policy
won't rerun
Nope. Its
Title: Group Policy won't rerun
Are you seeing any errors in the event
log? If you right-click on the Software Package, there is an option to
Redeploy the application. You may want to try that.
Kevin
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stu Packett
Title: Group Policy won't rerun
By the way, the errors would be in the
Application log on the client, not the server.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stu Packett
Sent: Friday, July 14, 2006 5:17
PM
To: ActiveDir@mail.activedir.org
Subject:
Title: Group Policy won't rerun
Stu-
When you uninstalled, did you do it through GP or by
removing from Add/Remove Programs? If the latter, than that is your problem.
Doing that leaves metadata in the registry related to the GP-deployed app that
the Software Installation CSE is probably
]
[mailto:[EMAIL PROTECTED] On Behalf Of Darren
Mar-EliaSent: Friday, July 14, 2006 3:37 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Policy
won't rerun
Stu-
When you uninstalled, did you do it through GP or by
removing from Add/Remove Programs? If the latter, than that is your
PROTECTED] On Behalf Of Darren
Mar-EliaSent: Friday, July 14, 2006 3:37 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Policy
won't rerun
Stu-
When you uninstalled, did you do it through GP or by
removing from Add/Remove Programs? If the latter, than that is your problem
: Friday, July 14, 2006 7:13 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Policy
won't rerun
I uninstalled via Add/Remove Programs. I thought
that doing it that way would lead to problems, so I have ghosted the laptop
and kept the same computer name. Is there anything
Title: Group Policy won't rerun
Is there anything else I should try to get this
going?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darren
Mar-EliaSent: Friday, July 14, 2006 4:22 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Policy
won't rerun
Nope
( if we are getting that
far ) q223300
steve
- Original Message -
From:
Stu
Packett
To: ActiveDir@mail.activedir.org
Sent: Friday, July 14, 2006 5:13 PM
Subject: RE: [ActiveDir] Group Policy
won't rerun
Is there anything else I should try to get this
going
Various 3rd party offerings are available in this space.
NetIQ, Quest, ScriptLogic and NetPro, for example, offer tools in this
area.
They can be used to grant users permissions to make 'offline' GPO
changes, which are then approved by an admin and deployed into prod by a
service account.
Hi Larry...
http://technet2.microsoft.com/WindowsServer/en/Library/a834e844-8eb2-4ee2-927c-9989b4f55dd71033.mspx?mfr=true
You can easily use the GPMC to delegete where they can link them, just
click the OU, and the delegate tab.
HTH,
John
Do they know more about GPO than you? Than give them the rights. Make
their work easier..and probably yours. What are you afraid of? That
someone will go wild on GPO and abuse your AD? Than turn on auditing.
-Z.V.
Larry Wahlers wrote:
Colleagues,
Our Microcomputer Support group wants the
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Monday, June 26, 2006 2:17 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Group Policy question
Hi Larry...
http://technet2.microsoft.com/WindowsServer/en/Library/a834e84
4-8eb2-4ee2-927c
Will need to be the user object. Not
security groups. You can use sec groups to filter.
Robert Rutherford
QuoStar
Solutions Limited
The Enterprise
Pavilion
Fern Barrow
Wallisdown
Poole
Dorset
BH12 5HH
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group
Policy not working?!
Will need to be the user object.
Not security groups. You can use sec groups to filter.
Robert Rutherford
QuoStar
Solutions Limited
The Enterprise
Pavilion
GPOs only apply to users and/or computer accounts and
nothing else!
Said in another way: the objects to be managed (users
and/or computers) must fall within the scope of management (SOM) of a GPO that
is linked to some OU (the objects must be directly in the OU the GPO is linked
to or in a
Hi James...
There are a couple articles warning against using Domain Local groups for
policies.
Can you try having them put in a global group in their own domain, and
adding that directly to the read and apply section of the policy?
http://support.microsoft.com/kb/309172/en-us has some info.
Matt-
Yes. When focused on a particular GPO, select the Scope tab in the
right-hand results pane, and then there will be a section called
Security Filtering where you can modify groups that have this permission
set.
Darren
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL
When created, a new GPO will *not* inherit rights from the parent (if we
examine SYSVOL perms, for example).
You may assign user1 and user2 the rights to create GPOs in the domain
(using GPMC) but each user will need to grant other users the right to
edit 'their' GPO.
FWIW, I think this is a
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Thursday, March 09, 2006 3:52 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] group policy creator owners
When created, a new GPO will *not* inherit rights from the parent
@mail.activedir.org
Subject: RE: [ActiveDir] group policy creator owners
When created, a new GPO will *not* inherit rights from the parent (if we
examine SYSVOL perms, for example).
You may assign user1 and user2 the rights to create GPOs in the domain
(using GPMC) but each user will need to grant
] On Behalf Of Graham Turner
Sent: 09 March 2006 15:44
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] group policy creator owners
thanks both for views on this which make a whole load of sense
i think how i am to proceed is to leave the 'domain admins' with the
task of GPO creation
: RE: [ActiveDir] group policy creator owners
That would allow the setting of 'block inheritance' and 'force
inheritance' and the like.
gpLink merely grants rights to link GPOs to the OU.
I'm sure Darren will fill in the large blanks left by me, again :)
neil
-Original Message-
From
Title: Group Policy Trusted Sites
User Configuration - Administrative
Templates - Internet Explorer - Internet Control Panel - Trusted
Sites Zone Template
Is this what you are referring to? Your
question was a little vague.
Doug Ferguson
Windows Systems Administrator
Hynix
Alex-
There are a variety of causes for these errors. They are kind of
catch-alls for a client's inability to access the SYSVOL portion of a
GPO. Here are some things to look for:
--TCP/IP Netbios Helper service not running on client (needs to be)
--DNS not properly configured on client to
The difference between the two profiles is
that the domain profile is applied when the OS detects that the machine is in
one of your domains networks. When it detects that it is outside of your
network the standard profile is applied. I would recommend that your use both
profiles and make
If the machine detects domain controllers on the network, it'll use the
domain profile. Otherwise it uses the standard profile. You could have a more
relaxed policy when the machine is on the local LAN, and a tighter policy
when the machine (presumably a laptop) is roaming on non-managed networks.
AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Policy
Object for Windows Firewall
The difference between
the two profiles is that the domain profile is applied when the OS detects that
the machine is in one of your domains networks. When it detects that it is
outside of your
modifications to the firewall
settings.
Cheers
Ken
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Hofert
Sent: Friday, 28 October 2005
10:27 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group
Policy Object for Windows Firewall
Peter,
Thanks
www.sbslinks.com/group.htm [that's SBS's group policy settings for the
XP sp2 firewall]
Domain is when you are 'on' the domain
Standard is when the device is unattached.
Also grab the XP sp2 security documents that were just released on the
web a few days ago.
Todd Hofert wrote:
I am
://www.microsoft.com/technet/community/columns/cableguy/cg0504.mspx
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley,
CPA aka Ebitz - SBS Rocks [MVP]
Sent: Friday, October 28, 2005 7:44 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Group
@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy Object for Windows Firewall
Just an FYI on this. On the Domain can be tricky here. For example. If
your user is connected to the corporate network via VPN, they will be
considered off the domain and will use the standard profile. The
determination
a connection's domain name to match your corporate network's
domain name.
Jeff
-Original Message-
From: Darren Mar-Elia [mailto:[EMAIL PROTECTED]
Sent: Friday, October 28, 2005 8:34 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy Object for Windows Firewall
the trick) to take effect after making the reg change.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jeff Salisbury
Sent: Friday, October 28, 2005 9:09 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy Object for Windows Firewall
We
I found this free registry GP CSE
at http://www.desktopstandard.com/PolicyMakerRegistryExtension.aspx
some of the feature it touts are
* Full control over tattooing ( i.e. means each setting becomes a policy and not preference)
* Registry Wizard for settings import
* Per-setting filtering
*
The PolicyMaker Registry Extension freeware works great.
On Wed, 26 Oct 2005 23:20:41 +0530, you wrote:
I found this free registry GP CSE
at http://www.desktopstandard.com/PolicyMakerRegistryExtension.aspx
some of the feature it touts are
** Full control over tattooing ( i.e. means each
]
[mailto:[EMAIL PROTECTED] On Behalf Of Jerold Schulman
Sent: Wednesday, October 26, 2005 11:08 AM
To: ActiveDir@mail.activedir.org
Subject: Re: Re: [ActiveDir]Group Policy Administrative Templates
The PolicyMaker(tm) Registry Extension freeware works great.
On Wed, 26 Oct 2005 23:20:41 +0530
There's a few free and for pay tools to do it. Check out
the following:
RegtoADM: turns .reg files into ADMs. Free
tool that is part of the NUTS utilities at http://yizhar.mvps.org/
ADM TEmplate Editor: This is a for pay
tool found at http://www.sysprosoft.com/adm_summary.shtml
Policy
:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia
Sent: Thursday, September 29, 2005 4:48 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy processing aborted
Could be a network stack timing issue. The KB article below applies to
Win2K and XP but doesn't say whether it explicitly
Could be a network stack timing issue. The KB article below applies to
Win2K and XP but doesn't say whether it explicitly is supported in 2K3.
However, it might be worth trying since this problem is common and this
registry hack can help in some of these cases.
: Thursday, September 29, 2005 4:48 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy processing aborted
Could be a network stack timing issue. The KB article below applies to
Win2K and XP but doesn't say whether it explicitly is supported in 2K3.
However, it might be worth
I've set the IE home page to our intranet, which is the only
site allowed; everything else goes to a bit-bucket proxy. So in:
User config\windows settings\internet explorer
maintenance\URLs\Important URLs, I've set the home page. But
it doesn't work. With a new user login, IE starts by
Essex Credit / Brickwalk
510 595 5083
**
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Steve Rochford
Sent: Tuesday, September 13, 2005 10:13 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group policy security
, 2005 3:06 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group policy security setting
OK; I finally figured this one out; I had to set a couple of other settings
for this to work.
Computer config\admin templates\Internet explorer\internet control
panel\security page
Charlie,
I'm wondering whether you tried to specify this setting through the Internet Explorer Maintenance\Security\Security Zones and content Ratings\. There you can actually edit the setting you're looking for.
Oliver Ryf
Quest
Cologne
List info : http://www.activedir.org/List.aspxList FAQ :
Of
Roger Seielstad
Sent: Friday, September 02, 2005 9:57 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group policy security setting
The other way that works is to add the UNC for the file server
(file://server/share) to the Trusted Sites, under
User Config / Windows
Hi Charlie,
If it is a user registry setting (other than Binary) there should be no
problem with a custom ADM template.
Can you explain what registry key it is and exactly what is not working?
Alan Cuthbertson
- Original Message -
From: Charlie Kaiser [EMAIL PROTECTED]
To:
Is the corresponding Registry value a type of reg_binary? If so you can't
set it via an ADM. You would need to use an alternate method to update each
user's Registry like via a login script.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Charlie
The other way that works is to add the UNC for the file server
(file://server/share) to the Trusted Sites, under
User Config / Windows Settings / IE Maintenance /Security / Security Zones
and Content ratings
Now that I look, there's the setting you're trying to change - which is why
it probably
Subject: RE: [ActiveDir] Group Policy delays
Check the event logs on the ones which are *not* having a problem. It
may be that for some reason they are not applying group policies - this
will then make them start up quickly (ie normal behaviour is slow
because of the security profile settings but some
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gary Clark
Sent: 03 August 2005 11:12
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy delays
Hi Neil,
Thanks some long forgotten security profile settings seem to
have woken
- Are your subnets and sites defined correctly? If not, clients may
authenticate and process GPOs from DCs across slow WAN links.
- Does your GPO contain lots of registry and/or file DACL/SACL settings? This
could account for the slow processing.
neil
-Original Message-
From: [EMAIL
---
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ruston, Neil
Sent: 03 August 2005 09:43
To: 'ActiveDir@mail.activedir.org'
Subject: RE: [ActiveDir] Group Policy delays
- Are your subnets and sites defined correctly? If not, clients may
authenticate and process
- 312.731.3132
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gary Clark
Sent: Wednesday, August 03, 2005 5:12 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy delays
Hi Neil,
Thanks some long forgotten security profile settings seem
Hi Brenda
If it's not part of the standard policy options, you could create your
template and modify the location of the Temporary Internet Files using
registry keys as described in this article.
http://windows.about.com/od/tipsarchive/l/bltip182.htm
See Matty's Group Policy FAQs for
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group policy question
Rick; I sent you the file offlist. I just rebooted the machine and still
have the same problem. Back to the drawing board...
I wanted to run gpresult, but since I can't get to anything on the
machine... :-)
I did run
Charlie,
Can you post the rest of the USERENV log? There should be some more lines
after the:
USERENV(e8.8338) 17:04:15:113 GetDeletedGPOList: Finished.
For all intents and purposes, the call CheckForGPOsToRemove does exactly
what it says. They next line enumerates the GPOs that need to be
, 2005 6:17 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group policy question
Charlie,
Can you post the rest of the USERENV log? There should be
some more lines
after the:
USERENV(e8.8338) 17:04:15:113 GetDeletedGPOList: Finished.
For all intents and purposes
Roseta
.adm files are found in
%systemroot%\inf
Regards
Peter
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
@mail.activedir.org
Subject: Re: [ActiveDir] group policy adm files
Roseta
.adm files are found in
%systemroot%\inf
Regards
Peter
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir
From Group Policy Editor, drill down to administrative templates and
then right click. Select Add or remove administrative templates
Regards
Peter
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
Hii,
I guess your solution of disabling firewall via GPO
lies in this link.
http://msmvps.com/kwsupport/archive/2004/08/27/12477.aspx
Dibendoo
--- tech [EMAIL PROTECTED] wrote:
Hello,
I wanted to know where the template files (.adm)
files of default domain
group policy is in
@mail.activedir.org'Subject: RE:
[ActiveDir] Group Policy Not working
The
script runs in the background and I do not see it run.
I
copied the VBS script to the local computer and when I try to run it, it opens
the script to view the language it does not run.
Nothing in event view, which I
Of
Christine Allen
Sent: Friday, April 29, 2005 6:50 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy Not working
Thanks to all for your help. We resolved the issue. Turns
out (I have no idea how) on certain desktops vbs scripts
were associated with notepad
I would think you could use a batch file with only cscript
scriptname.vbs
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Charlie Kaiser
Sent: Friday, April 29, 2005 9:39 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy
@mail.activedir.org
Subject: Re: [ActiveDir] Group
Policy Not working
Hi Christine,
Seems like it should work!
I always find the UserEnv.Log is a good place to start. If you activate
Detailed logging, then logon to the workstation it provides detailed info in
the file
What does GPresult return?
De:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Christine Allen
Envoyé: Thursday, April 28, 2005 11:35 AM
À:
'ActiveDir@mail.activedir.org'
Objet: [ActiveDir] Group
Policy Not working
Hello,
My environment is windows
The first thing you should check is to see if the GP is being applied.
You can do this on w2K by running gpresult on the hosts where it's not
working. You should also check they do not have script blocking
software installed.
Regards
Peter Jessop
he
computer received "EFS recovery" settings from these GPOs:
Local Group
Policy Default Domain Policy
C:\Documents and Settings\arhyppoliteGPRESULT /USER
-Original Message-From: Bruyere, Michel
[mailto:[EMAIL PROTECTED]Sent: Thursday, April 28, 2005
11:44 AMTo: ActiveDi
Does the script not run or does it run but not properly?
Are there any clues in the event log?
Can you run the script manually from the workstation?
Are they receiving the GP over a WAN?
in there.
What
locally could be preventing the script from running?
Thanks
for your help!
-Original Message-From: Peter Jessop
[mailto:[EMAIL PROTECTED]Sent: Thursday, April 28, 2005 12:20
PMTo: ActiveDir@mail.activedir.orgSubject: Re:
[ActiveDir] Group Policy Not workingDoes
PROTECTED] On Behalf Of Christine
AllenSent: Thursday, April 28, 2005 9:49 AMTo:
'ActiveDir@mail.activedir.org'Subject: RE: [ActiveDir] Group Policy
Not working
The
script runs in the background and I do not see it run.
I
copied the VBS script to the local computer and when I try to run it
Microsoft antispyware?
Norton antivirus?
present, it should have the
information you need to do further debugging.
Jeff
From: Christine Allen
[mailto:[EMAIL PROTECTED] Sent: Thursday, April 28, 2005
9:49 AMTo: 'ActiveDir@mail.activedir.org'Subject: RE:
[ActiveDir] Group Policy Not working
The
script runs in the background and I do
It
affects the use of local machine account passwords, i.e. - those accounts in the
SAM of the domain member.
--Dean WellsMSEtechnology* Email: dwells@msetechnology.comhttp://msetechnology.com
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Christine
AllenSent: Tuesday,
Even though you can change the policy, it won't affect the actual password policy that you specified on the domain
level. Your thought is right.
-Oliver
runIT AG
Zuerichstrasse 98
8600 Duebendorf
Switzerland
On Tue, 19 Apr 2005 10:40:56 -0400
Christine Allen [EMAIL PROTECTED] wrote:
Can someone
I always thought password policies at the
OU, will only affect the local accounts on computers.
Dan
-Original Message-
From: Christine Allen
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, April 19, 2005 7:41
AM
To: 'ActiveDir@mail.activedir.org'
Subject: [ActiveDir] Group Policy
It will only affect the local password policy of
the workstations that are in that OU.It has not affect on the domain
password settings. It will only change the local password
requirements. There is only one password policy per domain.
- Original Message -
From:
Christine
Thanks
all. That's what I thought.
-Original Message-From: Gilbert, Daniel L Mr
ANOSC/FCBS [mailto:[EMAIL PROTECTED]Sent:
Tuesday, April 19, 2005 10:53 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group
Policy
I always thought
password policies
I think you need to update your
Group Policy ADM Files.
You can download them from
http://www.microsoft.com/downloads/details.aspx?FamilyID=92759d4b-7112-4b6c-ad4a-bbf3802a5c9bDisplayLang=en
Peter Jessop
List info : http://www.activedir.org/List.aspx
List FAQ:
George Arezina wrote:
Has anyone run into this warning and/or error while using GPMC?
One tip - If You have message box with error statement You don't have to
make screenshoot - just press CTRL+C on this box and error message will
be placed in Your clipboard - then You can past it into e-mail or
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Group policy management console
George Arezina wrote:
Has anyone run into this warning and/or error while using GPMC?
One tip - If You have message box with error statement You don't have to
make screenshoot - just press CTRL+C on this box
What version is your 2K DC up to? Is it SP4?
That aside, I would expect a setting of 1 to prevent enumeration per
http://support.microsoft.com/kb/246261
Upgrading would not be a bad idea if that's possible.
I'm just wondering is that all the settings needed to prevent the anonymous
enumeration
What version is your 2K DC up to? Is it SP4?
SP4, yes indeed.
That aside, I would expect a setting of 1 to prevent enumeration per
http://support.microsoft.com/kb/246261
I've never had any luck with a setting of 1. 2 has been the only
setting that has prevented enumeration on any 2K
Separate GPO might be your best workaround.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Hunter, Laura E.
Sent: Tuesday, March 01, 2005 11:21 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy weirdness (or maybe 2K/2K3 interop
What were you expecting to see? Some of the options
will only show up from a machine that has that software loaded. An example
of that is the Windows Firewall settings which are found when connecting via XP
SP2 workstation but not from the server console.
Is that possible in this case?
.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al
Sent: Monday, January 31, 2005
9:52 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir]Group
Policy editor
What were you expecting to see? Some
of the options will only show up from a machine that has
PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir]Group Policy editor
No these are not the admin templates. These are like I cannot see the options
for internet maintenance wizard, startup and shutdown script, Folder
redirection.. Nothing except Remote installation service
pak installed.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Mulnick,
AlSent: Monday, January 31,
2005 9:52 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir]Group Policy
editor
What were you expecting
to see? Some of the options will only show up from
Check in google.com. You
will get tons of papers on GPO.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mohammed
TantawiSent: Wednesday, January 12, 2005 6:55 PMTo:
ActiveDir@mail.activedir.orgSubject: [ActiveDir] Group
Policy
Dear All,
I am still new to the Active
How about?
http://www.google.com
http://www.microsoft.com
-ASB
FAST, CHEAP, SECURE: Pick Any TWO
http://www.ultratech-llc.com/KB/GroupPol.TXT
On Wed, 12 Jan 2005 16:24:45 +0300, Mohammed Tantawi
[EMAIL PROTECTED] wrote:
Dear All,
I am still new to the Active Directory ,
Happy readings make sure to take a
couple of weeks of ;-)
http://searchwin2000.techtarget.com/originalContent/0,289142,sid1_gci966312,00.html
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Mohammed Tantawi
Sent: woensdag 12 januari 2005
14:25
To:
You will find tons of GP resources at http://www.microsoft.com/windowsserver2003/technologies/management/grouppolicy/default.mspx
or http://www.microsoft.com/windows2000/technologies/management/default.asp#section10
- Original Message -
From:
Mohammed
Tantawi
To:
And of course:
www.gpoguy.com
www.gpanswers.com
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tim
HinesSent: Wednesday, January 12, 2005 6:50 AMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Group
Policy
You will find tons of GP resources at http
I think there is a policy setting for roaming profiles that
you will allow you to skip the Temp Internet Files folder.
Unless if you need the temp to follow them
around.
David J.
PerdueMCSE
2000, MCSE NT, MCSA,
entirety, whether in electronic or hard copy format.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Perdue David J Contr
InDyne/Enterprise IT
Sent: Friday, October 08, 2004
11:47 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Group
Policy to set limit or disk space
1 - 100 of 239 matches
Mail list logo
