Re: Remote Assistance SP2 Group Policy

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 01/13/05


Date: Thu, 13 Jan 2005 22:35:48 +0100

Vdubayas wrote:

> I have Remote Assistance enabled via GP at the domain level.
>
> New machine are coming with Service pack 2 installed which means windows
> firewall. We would like to keep this feature enabled but still need to use
> Remote assistance.
>
> I know which changes I need to make in order to enable Remote Assistance
> with SP2 but I do not have the option in my group Policy.
>
> I need to make an entry here
>
> Computer Configuration\Administrative Templates\Network\Network
> Connections\Windows Firewall
>
> This setting is available on the local GP for the XP machines but is not
> available in the Domain GP. Domain is not running in W2K3 mode ( W2K ).
Hi

If you have used a Windows XP SP2 computer to administer the Group
Policy settings in the domain, the adm files should automatically
have been updated.

Group Policy Template Behavior in Windows Server 2003
http://support.microsoft.com/kb/316977

I would think most things in the link above applies to Win2k as well.

Recommendations for managing Group Policy administrative
template (.adm) files
http://support.microsoft.com/kb/816662

A discussion about it here:
http://groups-beta.google.com/group/microsoft.public.windows.server.active_directory/browse_frm/thread/a5d8a9f8fdf5f75a/130e4d93db7c9984?q=sp2+adm+sysvol+update+sp2&_done=%2Fgroups%3Fas_q%3Dsp2+adm+sysvol+update+sp2%26num%3D10%26scoring%3Dr%26hl%3Den%26ie%3DUTF-8%26as_epq%3D%26as_oq%3D%26as_eq%3D%26as_ugroup%3D%26as_usubject%3D%26as_uauthors%3D%26as_drrb%3Dq%26as_qdr%3D%26as_mind%3D1%26as_minm%3D1%26as_miny%3D1981%26as_maxd%3D13%26as_maxm%3D12%26as_maxy%3D2004%26safe%3Doff%26&_doneTitle=Back+to+Search&&d#130e4d93db7c9984

See here on how Jeff updated the Default Domain Policy templates when
they would not do it automatically:
http://groups-beta.google.com/group/microsoft.public.win2000.group_policy/browse_frm/thread/3837195be66e6e5c/fa468982fef80549?q=sp2+adm+sysvol+update+sp2&_done=%2Fgroups%3Fas_q%3Dsp2+adm+sysvol+update+sp2%26num%3D10%26scoring%3Dr%26hl%3Den%26ie%3DUTF-8%26as_epq%3D%26as_oq%3D%26as_eq%3D%26as_ugroup%3D%26as_usubject%3D%26as_uauthors%3D%26as_drrb%3Dq%26as_qdr%3D%26as_mind%3D1%26as_minm%3D1%26as_miny%3D1981%26as_maxd%3D13%26as_maxm%3D12%26as_maxy%3D2004%26safe%3Doff%26&_doneTitle=Back+to+Search&&d#fa468982fef80549

You can also download the latest .adm files from here:

http://go.microsoft.com/fwlink/?linkid=31057

If you install the WinXP SP2 .adm files on the domain controller, but
you don't use WinXP SP2 to edit the GPO settings, you may you get the
message below, install the hotfix that is available in the KB article
in the link below to solve this.

"The following entry in the [strings] section is too long and has
been truncated" error message when you try to modify or to view GPOs
in Windows Server 2003, Windows XP Professional, or Windows 2000
http://support.microsoft.com/?id=842933

Also, or a complete list of Group Policy options for the WinXP SP2, see
WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
Windows XP with Service Pack 2":
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx


Relevant Pages

  • Re: Startup programs
    ... > If you don't wish to follow all of the advice immediately, ... I will assume a "Windows" operating system is what ... If there was more than one, install ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Latest Update Wreaked Havok - Cannot Restore
    ... track of what you install in order to be able to uninstall it. ... been diligent with your critical updates, ... Windows Update ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: partitioned hardrive and installing XP Pro
    ... the clean install method is the best by far... ... of contacting the Internet UNTIL you have activated the Windows XP ... download/instyall all critical updates. ... FIREWALL ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Service Pack 1 & 2
    ... but enable to install because of service pack 2. ... >> I recently reinstalled Windows XP home on a new hard disk because the ... >> I tried to install service pack 1 but was rejected from doing so. ... > Why you should use a computer firewall.. ...
    (microsoft.public.windowsupdate)
  • Re: How do I get the Windows Update icon to stop notifying me of SP2?
    ... If you don't wish to follow all of the advice immediately, ... using Windows XP "prettifications". ... If there was more than one, install them back ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsupdate)