Policies are on server, not on workstation

anonymous_at_discussions.microsoft.com
Date: 12/01/03


Date: Mon, 1 Dec 2003 05:43:17 -0800

I know about gpedit locally, but we have policies set up
on a Windows 2000 server for our XP stations. Students
get policies from there. For some reason, they are no
longer getting them. The only change I've really made is
messing with the default user profile.

>-----Original Message-----
>Cheryl,
>
>If you use the Group Policy Editor, locally, all changes
you make will be
>applied to all users. So, if you specifiy a default
profile (Start menu and
>Desktop) all users on that machine will get that
profile. Since you're on a
>Novell Network, you don't have the Active Directory
portion of Windows
>Server to apply the changes to specific user accounts.
>
>--
>Doug Knox, MS-MVP Windows XP/ Windows Smart Display
>Win 95/98/Me/XP Tweaks and Fixes
>http://www.dougknox.com
>--------------------------------
>Associate Expert
>ExpertZone -
http://www.microsoft.com/windowsxp/expertzone
>--------------------------------
>Please reply only to the newsgroup so all may benefit.
>Unsolicited e-mail is not answered.
>
>"Cheryl Mire" <cmire@nospam.rummelraiders.com> wrote in
message
>news:036b01c3b2b9$03cbaf00$a301280a@phx.gbl...
>> I need the setting to be in the Default so that any new
>> users who log on get it. I'm on a school network -
>> Novell - not peer to peer or stand alone. Something
has
>> happened in the default profile and new users are not
>> getting group policy settings. They are only getting
the
>> setting which reside in the Default.
>>
>> For example, they are not getting the group policy
setting
>> which makes non-administrative stations download and
auto
>> install the Windows updates on a schedule. In
addition,
>> new administrative users don't get an appropriate start
>> menu or desktop; they get the very locked down student
>> desktop.
>>
>>
>> >-----Original Message-----
>> >GPEDIT will apply this policy to all users of the
>> machine, in a peer-peer or
>> >stand alone environment. Editing the Registry
manually,
>> applies this
>> >setting to the currently logged on user, yes. See
>> www.dougknox.com, Win XP
>> >Tips, Advanced Registry Editing for a method to edit a
>> different "user's"
>> >CURRENT_USER portion of the Registry, without having
to
>> log on to their
>> >desktop.
>> >
>> >While it shouldn't exist, you may want to look for the
>> same value in
>> >HKEY_LOCAL_MACHINE Some settings here, can override
the
>> HKCU setting, even
>> >if HKCU says the policy is to be enforced.
>> >--
>> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
>> >Win 95/98/Me/XP Tweaks and Fixes
>> >http://www.dougknox.com
>> >--------------------------------
>> >Associate Expert
>> >ExpertZone -
http://www.microsoft.com/windowsxp/expertzone
>> >--------------------------------
>> >Please reply only to the newsgroup so all may benefit.
>> >Unsolicited e-mail is not answered.
>> >
>> ><anonymous@discussions.microsoft.com> wrote in message
>> >news:004d01c3b05d$f42d4340$a501280a@phx.gbl...
>> >> Won't that change only address the user who is
currently
>> >> logged on -- namely me as administrator?
Obviously, I
>> >> can't get to registry unless I'm logged on as that.
>> >> Student user has no rights to registry.
>> >>
>> >> I'm suspicious that this inability to receive the
policy
>> >> is buried in my default user profile and I don't
know
>> how
>> >> to weed it out.
>> >>
>> >> >-----Original Message-----
>> >> >I'm not sure why its not working for you, but under
>> User
>> >> Configuration,
>> >> >Administrative Templates, Start Menu and Taskbar,
>> Remove
>> >> access to the
>> >> >context menus for the taskbar, works here. It
prevents
>> >> right clicking the
>> >> >Start button as well.
>> >> >
>> >> >To manually implement this policy, in REGEDIT go
to:
>> >> >
>> >>
>>
>HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersi
o
>> >> n\Policies\Explore
>> >> >r
>> >> >
>> >> >In the right pane, look for or create a DWord value
>> called
>> >> >NoTrayContextMenu. Set it to 1.
>> >> >
>> >> >--
>> >> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
>> >> >Win 95/98/Me/XP Tweaks and Fixes
>> >> >http://www.dougknox.com
>> >> >--------------------------------
>> >> >Associate Expert
>> >> >ExpertZone -
>> http://www.microsoft.com/windowsxp/expertzone
>> >> >--------------------------------
>> >> >Please reply only to the newsgroup so all may
benefit.
>> >> >Unsolicited e-mail is not answered.
>> >> >
>> >> ><cmire@rummelraiders.com> wrote in message
>> >> >news:096501c3b042$f7ae9610$3101280a@phx.gbl...
>> >> >> I deploy Windows XP workstations in a school
using
>> >> sysprep
>> >> >> and group policies. I have locked down the
desktop
>> >> pretty
>> >> >> well, and Windows Explorer does not show up BUT
when
>> I
>> >> >> right click on START, I get full access to
Explorer.
>> >> >>
>> >> >> I have tried using "disable taskbar context"
and "no
>> >> file
>> >> >> menu in Explorer" and "restrict access to C
drive"
>> but
>> >> >> nothing seems to stop the behavior.
>> >> >>
>> >> >> I need users to be able to find and open their
files
>> on
>> >> >> the network drives when they use Office, but I
don't
>> >> want
>> >> >> them browsing, etc
>> >> >
>> >> >
>> >> >.
>> >> >
>> >
>> >
>> >.
>> >
>
>
>.
>