Re: Securing a 2k client in a NT4 Domain

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 03/08/05 

Date: Tue, 8 Mar 2005 16:41:48 -0600

I believe that Windows 2000 will read the ntconfig.pol but am not sure but
you can test that out easily enough. You can certainly configure local Group
Policy on each computer but that can not be centralized in a NT4.0 domain.
Gpedit.msc opens the local Group Policy editor that will affect ALL users
that logon to that computer though their are hacks to exempt administrators
if need be. There is not an official way to copy Group Policy from one
computer to another but I have heard of users copying the
\winnt\system32\group policy\user registry.pol file from one computer to
another. I have not tried that myself. The link below explains in more
detail. --- Steve

http://support.microsoft.com/kb/274478/EN-US/

"Kevin O." <kevinREMOVE@owens2000.fsbusiness.co.uk> wrote in message
news:%23UO5cu$IFHA.2576@TK2MSFTNGP15.phx.gbl...
> You may have been asked this a dozen times guys, im sorry if you have,
> heres
> my questions - we are still running a nt domain, and due to the nature of
> the kids at a school i work at, we need to secure some 2k desktops we have
> just aquired.
>
> Now will ntconfig.pol do the trick or do i have to implement local group
> policies. Any help or a point in the right direction is much appreciated.
>
> All we need to do basically is create custom start menu, restrict display
> and control panel settings and disable internet access, To most of the
> login
> profiles. Done this with 9x clients but new to 2000/XP.
>
> T.I.A,
>
> Kevin
>
>

Relevant Pages

  • Re: What the "Local Group Policy" definition?
    ... Local Group Policy is the built in Group Policy for that computer and can be ... However settings defined in local Group Policy will be ... that a change that is applied to the local server or pc by an admin user? ...
    (microsoft.public.windows.group_policy)
  • Re: Can Internet Explorer be Deleted?
    ... removing access to Internet Explorer does not affect e-mail. ... GPO for the machines that should have IE disabled. ... "gpedit.msc" to open the Group Policy MMC console. ... machines, then I recommend using AD GPOs instead of local Group Policies, ...
    (microsoft.public.windowsxp.help_and_support)
  • Can Group Policy Use Rules That Refer to Custom Local Groups?
    ... Can group policy be used to populate each member server with rules that ... gets administered locally since it is a local group. ... member server, then it appears that group policy simply kicks up a 1202 ...
    (microsoft.public.windows.group_policy)
  • Re: Privilege to install / uninstall software on numerous systems.
    ... Well, you won't be able to add a domain local group to a computer local group, so that won't work! ... But in general, if you want to use "this group is a member of" then what you do is when you do the "Add Group", you would add the group you want to make a member of the Power Users Group. ... Script Group Policy Settings with the GPExpert Scripting Toolkit for PowerShell! ...
    (microsoft.public.windows.group_policy)
  • Defining Group Policies for Windwos 2003 stand-alone server
    ... >I'm trying to create a group policy on Windows 2003 ... the only MMC thast is available ... >applied to a particular local group in Windows 2003 ...
    (microsoft.public.win2000.security)