RE: NT 4 Server User Policies

From: Machtolff, Andrew J (ajmachtolff@tva.gov)
Date: 07/02/02 

From: "Machtolff, Andrew J" <ajmachtolff@tva.gov>
To: "'Ross Nelson'" <coutcin@spydermania.com>, security-basics@lists.securityfocus.com
Date: Tue, 2 Jul 2002 13:58:54 -0400

As far as I know, you just have to name the file ntconfig.pol and put it
in the NETLOGON directory. The workstations on the domain look for that
file there, and will apply any applicable policies to them selves / their
users.

Note: All of your policies should be located in that one file. i.e. if you
have a policy for Marketing and policy for Accounting, both group policies
should be visible when you open ntconfig.pol in PolicyEditor.

-----Original Message-----
From: Ross Nelson [mailto:coutcin@spydermania.com]
Sent: Sunday, June 30, 2002 6:22 PM
To: security-basics@lists.securityfocus.com
Subject: RE: NT 4 Server User Policies

I deleted the message that I intended to reply too...oops.

I did put them (after looking this stuff up online this morning) in
C:\WINNT\System32\Repl\Incoming\Scripts or whatever it was, but they
didn't take effect.

As for the login script, do you mean a .cmd/.bat file that calls the
policy file? If so, how does one do that?

Ross Nelson

On Mon, 1 Jul 2002, Joel F. wrote:

> One way to do it is setup a login script, so that the policys are
> automatically imported on login.
>
> -----Original Message-----
> From: Ross Nelson [mailto:coutcin@spydermania.com]
> Sent: Saturday, June 29, 2002 6:06 AM
> To: security-basics@lists.securityfocus.com
> Subject: NT 4 Server User Policies
>
> Hi.
>
> The store I work at wants to have a network set up with different
> versions
> of Windows, maybe *nix eventually. I have installed NT4 Server on a box
> to be our dedicated server, but I can't get the policies to work right.
> I
> created a user `Visitor' and created a new .pol file to lock that user
> out
> of changing many settings, but it didn't work. Am I supposed to move
> the
> ..pol file to a different folder or something? `Visitor' still has all
> rights that anyone else in `Users' or `Guests' (not sure where I put it)
> has.
>
> Ross Nelson
>
>

Relevant Pages

  • RE: NT 4 Server User Policies
    ... All of your policies should be located in that one file. ... > have a policy for Marketing and policy for Accounting, ... > Subject: RE: NT 4 Server User Policies ... > As for the login script, do you mean a .cmd/.bat file that calls the ...
    (Security-Basics)
  • Re: Erratic slow login Win2k3 from XP SP2 - Profile GPO issue log
    ... I am not sure what the attempts to find .Net Framework policy ... Timeout in processing login script, profile, CSE ... now link your policies one at a time to it. ...
    (microsoft.public.windows.group_policy)
  • RE: NT 4 Server User Policies
    ... instructions on creating/applying policy in a domain environment, ... NT 4 Server User Policies ... > As for the login script, do you mean a .cmd/.bat file that calls the ...
    (Security-Basics)
  • Re: SBS 2008 - "Exchange E-Mail address policy cannot be configured"...
    ... I verified all of that and do not see any policies that would cause ... Check Exchange 2003 policies" part of the following SBS ... " The Exchange E-mail address policy cannot be configured. ... ONLY Mailbox Manager policies and do not define e-mail addresses ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2008 - "Exchange E-Mail address policy cannot be configured"...
    ... I verified all of that and do not see any policies that would cause ... This issue occurs due to mailbox management policies or ... Check Exchange 2003 policies" part of the following SBS ... " The Exchange E-mail address policy cannot be configured. ...
    (microsoft.public.windows.server.sbs)