Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Group/User Policies

  • 12-11-2007 12:08pm
    #1
    Delphi91
    Registered Users, Registered Users 2 Posts: 1,501 ✭✭✭


    Hi,

    At work, we use a Windows 2003 server with Windows XP pc's attaching to it.

    I remember being able to set various policies on Windows 98 which locked down screensavers, wallpaper, etc. I'd like to be able to do the same under the newer system.

    Can anyone point me in the right direction? Is there something like poledit available?

    Mike


Comments

  • #2
    seamus
    Registered Users, Registered Users 2 Posts: 68,317 ✭✭✭✭seamus


    poledit was replaced with gpedit. Group policy can be used across domain for locking down machines/users.

    http://www.microsoft.com/windowsserver2003/technologies/management/grouppolicy/default.mspx


  • #3
    Delphi91
    Registered Users, Registered Users 2 Posts: 1,501 ✭✭✭Delphi91


    seamus wrote: »
    poledit was replaced with gpedit. Group policy can be used across domain for locking down machines/users.

    http://www.microsoft.com/windowsserver2003/technologies/management/grouppolicy/default.mspx

    Seamus, thanks for that, it's just what I'm looking for.

    One other question: Before I managed to get the utility above, a number of pc's had been changed (network settings, etc). Is it possible to define a "default" setup and then make every pc that logs into the domain use that default setup?


  • #4
    seamus
    Registered Users, Registered Users 2 Posts: 68,317 ✭✭✭✭seamus


    Active Directory's heirarchical structure allows you to set multiple policies on machines and people depending on their position in AD.

    Most organisations will define the basic settings such as screensavers, password policies, logon policies, etc at the domain level. AD includes the "Default Domain Policy" when you create a domain which is applied to the root level of the domain and therefore applies to all users and machines in that domain. Most people customise this policy for their own needs.

    If you want to define additional settings for a specific group of machines or users, you can put them in an OU and then define a policy for that OU. Then the domain AND the OU policies are applied.
    You can also specify the local computer policy on each machine which is unique to that machine. There's a specific way in which precedence of these policies is applied (i.e. who overwrites who), but I don't know it offhand.

    Note that while group policy allows you to massively customise your domain machines, it can't change everything. The biggest bonus of group policy is the ability to apply startup & logon scripts to any machine in the domain. So if a setting can't be customised in GP, you can probably write a script that will do it for you when the user logs on.


Advertisement