PC Review


Reply
Thread Tools Rate Thread

Applying Group Policy vs NTConfig.pol

 
 
=?Utf-8?B?QW5keQ==?=
Guest
Posts: n/a
 
      2nd Dec 2005
Hello all,
I am hoping someone can help me.
I have an AD with 2000, XP and NT Clients
I have created group policy to managed the 2000 and XP clients
and created a poledit policy to manage to NT clients.

I have found that for some reason, some of the 2000 clients are picking up
the poledit policy instead of the group policy, or, they are picking up
settings from both.

Do you know how I can stop this from happening so that the 2000 clients
apply group policy and not the poledit policy?

Many Thanks


Andy

 
Reply With Quote
 
 
 
 
Darren Mar-Elia \(MVP\)
Guest
Posts: n/a
 
      2nd Dec 2005
Andy-

Does this article help?
http://support.microsoft.com/default...b;en-us;258691

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information
Hub:
FAQs, Whitepapers and Utilities for all things Group Policy-related
Just Released! The new Windows Group Policy Guide from Microsoft
Press!!!
Check it out at http://www.microsoft.com/mspress/books/8763.asp

"Andy" <(E-Mail Removed)> wrote in message
news:20D64682-A26C-48FA-89CF-(E-Mail Removed)...
> Hello all,
> I am hoping someone can help me.
> I have an AD with 2000, XP and NT Clients
> I have created group policy to managed the 2000 and XP clients
> and created a poledit policy to manage to NT clients.
>
> I have found that for some reason, some of the 2000 clients are picking up
> the poledit policy instead of the group policy, or, they are picking up
> settings from both.
>
> Do you know how I can stop this from happening so that the 2000 clients
> apply group policy and not the poledit policy?
>
> Many Thanks
>
>
> Andy
>



 
Reply With Quote
 
=?Utf-8?B?QW5keQ==?=
Guest
Posts: n/a
 
      2nd Dec 2005
Hi Darren,
Thanks for your reply. I don't think the link provides me with an answer.
Basically we DID have a NT domain and an AD in a trust, the NT domain is no
longer and the trust is removed.

These 2000 PC's are newly built, so know nothing of the old infrastructure
(so they cannot have been tattooed by the old NT domain Policy)

Here is an example, I had to implement a banner for all users that log in.
I have set the banner in Group policy, so the XP PC's (and supposedly 2000
PC's) get it
I wanted to do the same in Poledit for the NT PC's. The trouble was the in
Poledit you are limited to the number of characters in the banner, so I had
to write a shorter one. The .pol file is in the netlogon share of all DC's.
For some reason the 2000 PC's are getting the shorter message from the
poledit policy instead of the one I specified in group policy.

Basically I want the 2000 PC's to ignore the .pol file in the netlogon share
of the DC's and only process Group Policy.


Thanks again

Andy

"Darren Mar-Elia (MVP)" wrote:

> Andy-
>
> Does this article help?
> http://support.microsoft.com/default...b;en-us;258691
>
> Darren
>
> --
> Darren Mar-Elia
> MS-MVP-Windows Server--Group Policy
> Check out http://www.gpoguy.com -- The Windows Group Policy Information
> Hub:
> FAQs, Whitepapers and Utilities for all things Group Policy-related
> Just Released! The new Windows Group Policy Guide from Microsoft
> Press!!!
> Check it out at http://www.microsoft.com/mspress/books/8763.asp
>
> "Andy" <(E-Mail Removed)> wrote in message
> news:20D64682-A26C-48FA-89CF-(E-Mail Removed)...
> > Hello all,
> > I am hoping someone can help me.
> > I have an AD with 2000, XP and NT Clients
> > I have created group policy to managed the 2000 and XP clients
> > and created a poledit policy to manage to NT clients.
> >
> > I have found that for some reason, some of the 2000 clients are picking up
> > the poledit policy instead of the group policy, or, they are picking up
> > settings from both.
> >
> > Do you know how I can stop this from happening so that the 2000 clients
> > apply group policy and not the poledit policy?
> >
> > Many Thanks
> >
> >
> > Andy
> >

>
>
>

 
Reply With Quote
 
Darren Mar-Elia \(MVP\)
Guest
Posts: n/a
 
      2nd Dec 2005
Andy-
That is a bit strange since on those Win2K machines, even if they are
picking the NT 4 policy, it should be overridden by the Group Policy. The
only thing I can think of is that the NT 4 policy puts the banner text into
a different reg key than the Group Policy and that that reg key is somehow
taking precedence. Can you confirm that the reg locations are the same for
both policies (by looking in the adm files for each)?

One alternative that should work is to tell Win2k to completely ignore
system policy. In the old days, I did this by modifying the registry on the
client as follows. Under the
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Update key on a Win2K
machine, change the value of UpdateMode from 1 to 0.

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Whitepapers and Utilities for all things Group Policy-related
Just Released! The new Windows Group Policy Guide from Microsoft Press!!!
Check it out at http://www.microsoft.com/mspress/books/8763.asp


"Andy" <(E-Mail Removed)> wrote in message
news:CE8A486B-A6A7-4D5A-9E73-(E-Mail Removed)...
> Hi Darren,
> Thanks for your reply. I don't think the link provides me with an
> answer.
> Basically we DID have a NT domain and an AD in a trust, the NT domain is
> no
> longer and the trust is removed.
>
> These 2000 PC's are newly built, so know nothing of the old infrastructure
> (so they cannot have been tattooed by the old NT domain Policy)
>
> Here is an example, I had to implement a banner for all users that log in.
> I have set the banner in Group policy, so the XP PC's (and supposedly 2000
> PC's) get it
> I wanted to do the same in Poledit for the NT PC's. The trouble was the in
> Poledit you are limited to the number of characters in the banner, so I
> had
> to write a shorter one. The .pol file is in the netlogon share of all
> DC's.
> For some reason the 2000 PC's are getting the shorter message from the
> poledit policy instead of the one I specified in group policy.
>
> Basically I want the 2000 PC's to ignore the .pol file in the netlogon
> share
> of the DC's and only process Group Policy.
>
>
> Thanks again
>
> Andy
>
> "Darren Mar-Elia (MVP)" wrote:
>
>> Andy-
>>
>> Does this article help?
>> http://support.microsoft.com/default...b;en-us;258691
>>
>> Darren
>>
>> --
>> Darren Mar-Elia
>> MS-MVP-Windows Server--Group Policy
>> Check out http://www.gpoguy.com -- The Windows Group Policy Information
>> Hub:
>> FAQs, Whitepapers and Utilities for all things Group Policy-related
>> Just Released! The new Windows Group Policy Guide from Microsoft
>> Press!!!
>> Check it out at http://www.microsoft.com/mspress/books/8763.asp
>>
>> "Andy" <(E-Mail Removed)> wrote in message
>> news:20D64682-A26C-48FA-89CF-(E-Mail Removed)...
>> > Hello all,
>> > I am hoping someone can help me.
>> > I have an AD with 2000, XP and NT Clients
>> > I have created group policy to managed the 2000 and XP clients
>> > and created a poledit policy to manage to NT clients.
>> >
>> > I have found that for some reason, some of the 2000 clients are picking
>> > up
>> > the poledit policy instead of the group policy, or, they are picking up
>> > settings from both.
>> >
>> > Do you know how I can stop this from happening so that the 2000 clients
>> > apply group policy and not the poledit policy?
>> >
>> > Many Thanks
>> >
>> >
>> > Andy
>> >

>>
>>
>>



 
Reply With Quote
 
=?Utf-8?B?QW5keQ==?=
Guest
Posts: n/a
 
      5th Dec 2005
Hi Darren,
Thanks for your reply. The NT Policy does put the banner into a different
part of the registry, however, the strange thing is that when looking in the
2 reg locations, only the banner for the Group Policy is there, the NT Policy
banner exists nowhere in the registry.

I have noticed that the c:\documents and settings\all users\ntuser.pol is
different between an XP and 2000 PC.

Unfortunately, the reg key you suggested did not seem to work.

Any other ideas??!

Many Thanks

Andy



"Darren Mar-Elia (MVP)" wrote:

> Andy-
> That is a bit strange since on those Win2K machines, even if they are
> picking the NT 4 policy, it should be overridden by the Group Policy. The
> only thing I can think of is that the NT 4 policy puts the banner text into
> a different reg key than the Group Policy and that that reg key is somehow
> taking precedence. Can you confirm that the reg locations are the same for
> both policies (by looking in the adm files for each)?
>
> One alternative that should work is to tell Win2k to completely ignore
> system policy. In the old days, I did this by modifying the registry on the
> client as follows. Under the
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Update key on a Win2K
> machine, change the value of UpdateMode from 1 to 0.
>
> Darren
>
> --
> Darren Mar-Elia
> MS-MVP-Windows Server--Group Policy
> Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
> FAQs, Whitepapers and Utilities for all things Group Policy-related
> Just Released! The new Windows Group Policy Guide from Microsoft Press!!!
> Check it out at http://www.microsoft.com/mspress/books/8763.asp
>
>
> "Andy" <(E-Mail Removed)> wrote in message
> news:CE8A486B-A6A7-4D5A-9E73-(E-Mail Removed)...
> > Hi Darren,
> > Thanks for your reply. I don't think the link provides me with an
> > answer.
> > Basically we DID have a NT domain and an AD in a trust, the NT domain is
> > no
> > longer and the trust is removed.
> >
> > These 2000 PC's are newly built, so know nothing of the old infrastructure
> > (so they cannot have been tattooed by the old NT domain Policy)
> >
> > Here is an example, I had to implement a banner for all users that log in.
> > I have set the banner in Group policy, so the XP PC's (and supposedly 2000
> > PC's) get it
> > I wanted to do the same in Poledit for the NT PC's. The trouble was the in
> > Poledit you are limited to the number of characters in the banner, so I
> > had
> > to write a shorter one. The .pol file is in the netlogon share of all
> > DC's.
> > For some reason the 2000 PC's are getting the shorter message from the
> > poledit policy instead of the one I specified in group policy.
> >
> > Basically I want the 2000 PC's to ignore the .pol file in the netlogon
> > share
> > of the DC's and only process Group Policy.
> >
> >
> > Thanks again
> >
> > Andy
> >
> > "Darren Mar-Elia (MVP)" wrote:
> >
> >> Andy-
> >>
> >> Does this article help?
> >> http://support.microsoft.com/default...b;en-us;258691
> >>
> >> Darren
> >>
> >> --
> >> Darren Mar-Elia
> >> MS-MVP-Windows Server--Group Policy
> >> Check out http://www.gpoguy.com -- The Windows Group Policy Information
> >> Hub:
> >> FAQs, Whitepapers and Utilities for all things Group Policy-related
> >> Just Released! The new Windows Group Policy Guide from Microsoft
> >> Press!!!
> >> Check it out at http://www.microsoft.com/mspress/books/8763.asp
> >>
> >> "Andy" <(E-Mail Removed)> wrote in message
> >> news:20D64682-A26C-48FA-89CF-(E-Mail Removed)...
> >> > Hello all,
> >> > I am hoping someone can help me.
> >> > I have an AD with 2000, XP and NT Clients
> >> > I have created group policy to managed the 2000 and XP clients
> >> > and created a poledit policy to manage to NT clients.
> >> >
> >> > I have found that for some reason, some of the 2000 clients are picking
> >> > up
> >> > the poledit policy instead of the group policy, or, they are picking up
> >> > settings from both.
> >> >
> >> > Do you know how I can stop this from happening so that the 2000 clients
> >> > apply group policy and not the poledit policy?
> >> >
> >> > Many Thanks
> >> >
> >> >
> >> > Andy
> >> >
> >>
> >>
> >>

>
>
>

 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Group Policy Not Applying Unless User is Part of Administrators Group octavian32@gmail.com Microsoft Windows 2000 Active Directory 8 5th Apr 2005 10:06 PM
Next Group Policy webcast (Applying Group Policy) Mark Williams [MSFT] Microsoft Windows 2000 Group Policy 0 11th Oct 2004 04:43 PM
Re: Applying Group policy to a security group Jimmy Andersson [MVP] Microsoft Windows 2000 Active Directory 0 11th May 2004 03:35 PM
Applying Group Policy to a Security Group =?Utf-8?B?Q2FybA==?= Microsoft Windows 2000 Group Policy 3 6th May 2004 03:10 PM
Group Policy Not applying over VPN justin Microsoft Windows 2000 Group Policy 1 6th Feb 2004 04:25 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 01:17 PM.