RE: Checking what GPs are in effect

Salvador.Manaois_at_infineon.com
Date: 04/08/05

  • Next message: George Vlahoulis: "RE: Windows Server 2003 Service Pack 1" 
    Date: Fri, 8 Apr 2005 15:46:34 +0800
To: <thor@hammerofgod.com>, <juandelacruz@gmail.com>, <focus-ms@securityfocus.com>

    NetIQ's Group Policy Administrator can also generate the resultant group
    policies albeit in a more fancy GUI-driven manner. I think it's
    precursor is FullArmor's FAZAM 2000.

    ...badz...

    -----Original Message-----
    From: Thor (Hammer of God) [mailto:thor@hammerofgod.com]
    Sent: Friday, April 08, 2005 2:44 AM
    To: Henry Ortega; focus-ms@securityfocus.com
    Subject: Re: Checking what GPs are in effect

    The "GPRESULT" command gives detailed information regarding applied
    group
    policies on the host system along with helpful summary information.
    Give it
    a shot and see if that provides you with the information you require.
    I'm
    assuming XP clients.

    T

    ------
    *Secure your infrastructure*
    Microsoft Ninjitsu: Securely Deploying MS Technologies
    security training delivered by Timothy Mullen.
    Registration now open for Blackhat Seattle 2005:
    http://www.blackhat.com/html/training-seattle-05/train-bh-sea-05-tm.html

    ----- Original Message -----
    From: "Henry Ortega" <juandelacruz@gmail.com>
    To: <focus-ms@securityfocus.com>
    Sent: Thursday, April 07, 2005 8:52 AM
    Subject: Checking what GPs are in effect

    > Is there a way for me to check what Group Policies
    > are actually in effect? I am testing some policies and
    > do not know for sure if it took effect or not.
    >
    > Sample scenario:
    > Implementing GP for Remote Desktop users to not see
    > any drives. When I log on to that machine, I still see the drives. So

    > I want to make sure if the GP actually tried to take effect but didn't

    > like it for some reason, or the GP didn't even try to be in effect.
    >
    > Any suggestions?
    >
    > ----------------------------------------------------------------------
    > -----
    >
    ------------------------------------------------------------------------ 

    ---
>
>
> 
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: George Vlahoulis: "RE: Windows Server 2003 Service Pack 1"

    Relevant Pages

    • Re: Local policy, IE and SP2...
      ... I must mention here that I rarely use GPEdit and almost always I change the Explorer or System policies through registry. ... The same I did for those tests I mentioned for SP2. ... this is true - those policies will not allow you to lock user accounts from launching applications from hidden drives. ...
      (microsoft.public.windowsxp.embedded)
    • Re: Checking what GPs are in effect
      ... policies on the host system along with helpful summary information. ... a shot and see if that provides you with the information you require. ... Microsoft Ninjitsu: Securely Deploying MS Technologies ... When I log on to that machine, I still see the drives. ...
      (Focus-Microsoft)
    • Re: XP in an NT Domain Issue - policy problems and drive mapping issues
      ... 1.)In NT I created a blank policy withing Policy Editor and saved this ... XP looks for policies to my new directory. ... Now I can make whatever changes are needed to get my drives to ... > on ?Primary Domain Controller'. ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: Question about Group Policies in XP.
      ... There is an option under both Computer configuration and User configuration ... cause I don't know enough about it but I have converted the drives to NTFS. ... >> policies under the user account but if I have to set these ... Should I give the user account administrator rights ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Map a network drive for all users
      ... placed the TS icon in it and applied required policies to it. ... toolbars" (before that, I unchecked to hide the Address Bar and the Standard ... I got that situation sorted out through adding a login script in GP. ... drives, map a network drive and use IE in explorer ...
      (microsoft.public.windows.terminal_services)