Re: what are "Registry" and "File system" categories for in a GPO ?

From: Arild Bakken (arildb__at_hotmail.com)
Date: 08/07/03 

Date: Thu, 7 Aug 2003 08:26:32 +0200

Remember that this is a computer configuration, which means that it is the
computer that must have the GPO - not the user! It also means that the
settings will not be set according to which user logs on.

Add the GPO to the OU where the computer resides. Then issue a "secedit
/refreshpolicy machine_policy /enforce" from the commandline on that
computer.

Arild

"Akhlaq Khan" <akhlaq@softechww.com> wrote in message
news:eivhiM$WDHA.2576@TK2MSFTNGP09.phx.gbl...
> Hello Curtis,
> I tried giving full rights to "everyone" on "MACHINE" and "USERS" keys and
> select "Replace existing permissions on all subkeys with inheritable
> permissions".
>
> I did the same for the "Program Files" folder. I was expecting that the
> people in the OU for which i configured this policy, would be able to
> compile and save applications in Visual Basic. But still, they get the
same
> error "Error accessing registry". I even tried restaring their
workstations.
> Maybe i am doing something wrong here. any ideas ?
>
> akhlaq.
>
> "Curtis Clay III [MSFT]" <cclay@online.microsoft.com> wrote in message
> news:OAsC9M3WDHA.1368@TK2MSFTNGP11.phx.gbl...
> > You are correct. These settings allow you to assign permissions to reg
> keys
> > or files.
> > "Akhlaq Khan" <akhlaq@softechww.com> wrote in message
> > news:ehtDfA3WDHA.1900@TK2MSFTNGP10.phx.gbl...
> > > My question is about the group policies in ...
> > >
> > > computer configuration > windows settings > security settings >
Registry
> > > computer configuration > windows settings > security settings > File
> > System
> > >
> > > i just wanna know what kind of policies can i configure for my users
on
> > the
> > > domain under these categories ? what i assume from the names is that
for
> > the
> > > "Registry" part ... i should be able to configure some specific
Registry
> > > keys on their systems which they might need access for. and for the
file
> > > system maybe some specific folders/files for the same reason. is my
> > > understanding correct ? or partially correct ?
> > >
> > > thanks ...
> > >
> > > akhlaq.
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: File System Security Setting Causes Slow Logon
    ... IMO the intent of filesystem ACLs in GPO is for only the very important ... > several machines at once so I put them all in an Organizational Unit, ... > (because it was setting the new NTFS permissions) but it worked. ... > assuming the cached settings on the machine need to be updated from the ...
    (microsoft.public.security)
  • Re: OU GPO - Problem setting TS Profile Path for users under a specifi
    ... You are configuring settings under Computer Configuration in a GPO ...
    (microsoft.public.windows.terminal_services)
  • Re: Will "Computer Configuration" policies that are applied at the OU level get passed dow
    ... > I have an OU called Florida that contains all of my users in Florida. ... > attach a Group Policy to this OU that contains Computer Configuration ... > settings, ... you'll need to link a GPO to the OU where your computer accounts ...
    (microsoft.public.win2000.group_policy)
  • Re: Software Restriction Policies
    ... If you applied it via Group Policy at the domain or Organizational Unit ... default security level to unrestricted or unlink the GPO that is applying ... the settings to the user or computer depending on where the policy is being ... applied - user or computer configuration. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How are group policys security settings and AD objects security settings related?
    ... Depends on what you mean by GPO security. ... GPOs *are* AD objects and in that sense the permissions are precisely ... INSIDE of a GPO you can use it to SET the NTFS, Registry, or Service ... Sounds like you are referring to the GPO "settings" intended to apply ...
    (microsoft.public.windows.server.active_directory)