Re: need a way to import 2000 gp into 2003 server

From: ajay (jgrace_at_digitelusa.net)
Date: 06/27/04


Date: Sun, 27 Jun 2004 14:04:14 -0400

thank you so much for the reply

i have the default dc policy and the default domain policy added to my AD
should i delete or remove the default domain policy and just leave the one
for DC
"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:%gjDc.97952$2i5.69247@attbi_s52...
> By default there are no user configuration settings defined on Group
Policy when you
> set up a domain. Computer/security policy settings are defined mostly in
Local
> Security Policy and Domain Controller Security Policy [mainly user rights
> assignments] for domain controllers , while domain policy defining
account/password
> policies. What you are talking about seems to be mostly an issue with user
group
> membership in that users need to be administrators on their local
computers to do all
> that you mention [in W2K]. If it suits your needs you can add the users
domain
> account to their local administrators or power users group on their
computer. You can
> use "restricted groups" in security policy at the OU level to modify the
membership
> of the local administrators/power users groups of computers in the OU.
First I would
> try adding users to the Network Configuration Operators group on their
local
> computers to allow them to manage networking properties and consider using
Group
> Policy to publish or assign .msi applications to them before letting them
all be
> local administrators. Users usually do cry when they can't clutter up
their computers
> with unathorized applications, file swapping programs, chat programs,
spyware,
> etc. --- Steve
>
>
> "ajay" <jgrace@digitelusa.net> wrote in message
> news:O1f%233O6WEHA.1888@TK2MSFTNGP11.phx.gbl...
> > i want to know is there a way to import a default gp for 2000sever into
my
> > new 2003 domain ...reason is that with the default domain gp all my wks
are
> > lock down (limited access and right ) and i can not seem to raised the
> > level example no permisson to manage netowrk settings, make vpn
> > connections, install applications .......this is what i want in the
future
> > but for now im locking laptops down with the 2003 gp and all my users a
> > crying .....please help
> >
> >
>
>



Relevant Pages

  • Re: Parts of GPO not working.
    ... If your users use other browsers like firefox from an usb stick/drive or whatever medium your policy will not help. ... I have a request that all of those computers not have Internet ... The settings in this GPO can only apply to the following groups, ... Group Policy refresh interval for computers Enabled ...
    (microsoft.public.windows.server.active_directory)
  • Parts of GPO not working.
    ... I have a request that all of those computers not have Internet ... The settings in this GPO can only apply to the following groups, ... Group Policy refresh interval for computers Enabled ...
    (microsoft.public.windows.server.active_directory)
  • Re: Automated logoff using Winexit.scr
    ... New OU - New Policy ... Settings: Configure this key then Propogate inheritable permissions to ... Permissions granted: Authenticated Users: Read/Special ... test GPO linked to it trying to accomplish that and move a couple computers ...
    (microsoft.public.windows.group_policy)
  • Re: Reinstall everytime assigned applications through GPO on start
    ... Software installation extension has been called for background policy refresh ... Stations - R&D Software (EMEA computers). ... Stations - R&D Software (EMEA computers) is set for installation because it ... The assignment of application Remote Administrator v2.1 from policy Software ...
    (microsoft.public.windows.group_policy)
  • Re: cant override screen saver policy
    ... > Settings in the User Configuration part of a GPO always apply to User ... > users log on to specific computers, then enable Loopback processing in a GPO ... >> don't get this policy setting. ...
    (microsoft.public.win2000.group_policy)

Quantcast