Dear All,

I have a Windows 2000 SP4 runs as PDC with more than 150 members (Win 2000
Pro & XP), I need to disable "Messenger Service" of each client's PC, is
there any way to Disable "Messenger Service" of each member thru PDC? so I
don't need to come into each client PC and disable the service manually..

Please help..

Thanks & Regards
Winanjaya

Create new group policy and e.g. link it to OU (Organization Unit) where
your Windows XP and Windows 2000 clients are in (computer accounts). Change
the following policy Computer Configuration > Windows Settings > Security
Settings > System Services. Here find a service called Messenger and double
click on it. Check the checkbox next to "Define this policy setting" and
select "Disabled". Close all Windows related to Group Policy Editor. See if
it applies desired settings on your client, but not it can take some time
(few hours) before all clients pick up new settings.

--
Mike
Microsoft MVP - Windows Security

"Winanjaya" <(E-Mail Removed)> wrote in message
news:CC7E558D-78A3-456D-892B-(E-Mail Removed)...
> Dear All,
>
> I have a Windows 2000 SP4 runs as PDC with more than 150 members (Win 2000
> Pro & XP), I need to disable "Messenger Service" of each client's PC, is
> there any way to Disable "Messenger Service" of each member thru PDC? so I
> don't need to come into each client PC and disable the service manually..
>
> Please help..
>
> Thanks & Regards
> Winanjaya
>
>
>

Thanks, I tried it to a client ' s PC .. but it does not work, I meant the
Messenger service still enabled and started..I also had restarted the
client's PC but the same problem still occurs ..

any idea?

Thanks & Regards
Winanjaya

"Miha Pihler [MVP]" wrote:

> Create new group policy and e.g. link it to OU (Organization Unit) where
> your Windows XP and Windows 2000 clients are in (computer accounts). Change
> the following policy Computer Configuration > Windows Settings > Security
> Settings > System Services. Here find a service called Messenger and double
> click on it. Check the checkbox next to "Define this policy setting" and
> select "Disabled". Close all Windows related to Group Policy Editor. See if
> it applies desired settings on your client, but not it can take some time
> (few hours) before all clients pick up new settings.
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "Winanjaya" <(E-Mail Removed)> wrote in message
> news:CC7E558D-78A3-456D-892B-(E-Mail Removed)...
> > Dear All,
> >
> > I have a Windows 2000 SP4 runs as PDC with more than 150 members (Win 2000
> > Pro & XP), I need to disable "Messenger Service" of each client's PC, is
> > there any way to Disable "Messenger Service" of each member thru PDC? so I
> > don't need to come into each client PC and disable the service manually..
> >
> > Please help..
> >
> > Thanks & Regards
> > Winanjaya
> >
> >
> >
>
>
>

Can you please tell me exactly what you did (all steps).

Can you also tell me what is version of the client (e.g. Windows 2000 SP4,
Windows XP SP1, ...)

--
Mike
Microsoft MVP - Windows Security

"Winanjaya" <(E-Mail Removed)> wrote in message
news:5B7609AD-0133-48D6-A7C1-(E-Mail Removed)...
> Thanks, I tried it to a client ' s PC .. but it does not work, I meant the
> Messenger service still enabled and started..I also had restarted the
> client's PC but the same problem still occurs ..
>
> any idea?
>
> Thanks & Regards
> Winanjaya
>
> "Miha Pihler [MVP]" wrote:
>
>> Create new group policy and e.g. link it to OU (Organization Unit) where
>> your Windows XP and Windows 2000 clients are in (computer accounts).
>> Change
>> the following policy Computer Configuration > Windows Settings > Security
>> Settings > System Services. Here find a service called Messenger and
>> double
>> click on it. Check the checkbox next to "Define this policy setting" and
>> select "Disabled". Close all Windows related to Group Policy Editor. See
>> if
>> it applies desired settings on your client, but not it can take some time
>> (few hours) before all clients pick up new settings.
>>
>> --
>> Mike
>> Microsoft MVP - Windows Security
>>
>> "Winanjaya" <(E-Mail Removed)> wrote in message
>> news:CC7E558D-78A3-456D-892B-(E-Mail Removed)...
>> > Dear All,
>> >
>> > I have a Windows 2000 SP4 runs as PDC with more than 150 members (Win
>> > 2000
>> > Pro & XP), I need to disable "Messenger Service" of each client's PC,
>> > is
>> > there any way to Disable "Messenger Service" of each member thru PDC?
>> > so I
>> > don't need to come into each client PC and disable the service
>> > manually..
>> >
>> > Please help..
>> >
>> > Thanks & Regards
>> > Winanjaya
>> >
>> >
>> >
>>
>>
>>

Hi..
below are my steps:

1. Active Directory Users & Computers
2. Right click on OU -> Properties
3. Group Policy -> Edit
4. Computer Configurations -> Windows Settings -> Security Settings ->
System Services -> Messengers
5. Define this policy settings, checked, then select Disabled radio button
-> Ok

our clients run on Windows 2000 Pro SP4 and Win XP SP2 .. I tested on
Windows 2000 Pro SP4 and not working.. meant the service still enabled and
started..

I need advise..

Thanks a lot in advance

Regards
Winanjaya


"Miha Pihler [MVP]" wrote:

> Can you please tell me exactly what you did (all steps).
>
> Can you also tell me what is version of the client (e.g. Windows 2000 SP4,
> Windows XP SP1, ...)
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "Winanjaya" <(E-Mail Removed)> wrote in message
> news:5B7609AD-0133-48D6-A7C1-(E-Mail Removed)...
> > Thanks, I tried it to a client ' s PC .. but it does not work, I meant the
> > Messenger service still enabled and started..I also had restarted the
> > client's PC but the same problem still occurs ..
> >
> > any idea?
> >
> > Thanks & Regards
> > Winanjaya
> >
> > "Miha Pihler [MVP]" wrote:
> >
> >> Create new group policy and e.g. link it to OU (Organization Unit) where
> >> your Windows XP and Windows 2000 clients are in (computer accounts).
> >> Change
> >> the following policy Computer Configuration > Windows Settings > Security
> >> Settings > System Services. Here find a service called Messenger and
> >> double
> >> click on it. Check the checkbox next to "Define this policy setting" and
> >> select "Disabled". Close all Windows related to Group Policy Editor. See
> >> if
> >> it applies desired settings on your client, but not it can take some time
> >> (few hours) before all clients pick up new settings.
> >>
> >> --
> >> Mike
> >> Microsoft MVP - Windows Security
> >>
> >> "Winanjaya" <(E-Mail Removed)> wrote in message
> >> news:CC7E558D-78A3-456D-892B-(E-Mail Removed)...
> >> > Dear All,
> >> >
> >> > I have a Windows 2000 SP4 runs as PDC with more than 150 members (Win
> >> > 2000
> >> > Pro & XP), I need to disable "Messenger Service" of each client's PC,
> >> > is
> >> > there any way to Disable "Messenger Service" of each member thru PDC?
> >> > so I
> >> > don't need to come into each client PC and disable the service
> >> > manually..
> >> >
> >> > Please help..
> >> >
> >> > Thanks & Regards
> >> > Winanjaya
> >> >
> >> >
> >> >
> >>
> >>
> >>
>
>
>

In article <433B1A09-F734-47CB-8B4D-(E-Mail Removed)>, in the
microsoft.public.win2000.security news group, =?Utf-8?B?V2luYW5qYXlh?=
<(E-Mail Removed)> says...

> Hi..
> below are my steps:
>
> 1. Active Directory Users & Computers
> 2. Right click on OU -> Properties
> 3. Group Policy -> Edit
> 4. Computer Configurations -> Windows Settings -> Security Settings ->
> System Services -> Messengers
> 5. Define this policy settings, checked, then select Disabled radio button
> -> Ok
>
> our clients run on Windows 2000 Pro SP4 and Win XP SP2 .. I tested on
> Windows 2000 Pro SP4 and not working.. meant the service still enabled and
> started..
>
> I need advise..
>

Just to be clear we're talking about the Messenger service and not
Windows Messenger or MSN Messenger, correct?

--
Paul Adare - MVP Virtual Machines
It all began with Adam. He was the first man to tell a joke--or a lie.
How lucky Adam was. He knew when he said a good thing, nobody had said
it before. Adam was not alone in the Garden of Eden, however, and does
not deserve all the credit; much is due to Eve, the first woman, and
Satan, the first consultant." - Mark Twain

Yes, I am talking about Messenger Services, I am actually want to block NET
SEND

any idea?

Thanks & Regards
Winanjaya

"Paul Adare" wrote:

> In article <433B1A09-F734-47CB-8B4D-(E-Mail Removed)>, in the
> microsoft.public.win2000.security news group, =?Utf-8?B?V2luYW5qYXlh?=
> <(E-Mail Removed)> says...
>
> > Hi..
> > below are my steps:
> >
> > 1. Active Directory Users & Computers
> > 2. Right click on OU -> Properties
> > 3. Group Policy -> Edit
> > 4. Computer Configurations -> Windows Settings -> Security Settings ->
> > System Services -> Messengers
> > 5. Define this policy settings, checked, then select Disabled radio button
> > -> Ok
> >
> > our clients run on Windows 2000 Pro SP4 and Win XP SP2 .. I tested on
> > Windows 2000 Pro SP4 and not working.. meant the service still enabled and
> > started..
> >
> > I need advise..
> >
>
> Just to be clear we're talking about the Messenger service and not
> Windows Messenger or MSN Messenger, correct?
>
> --
> Paul Adare - MVP Virtual Machines
> It all began with Adam. He was the first man to tell a joke--or a lie.
> How lucky Adam was. He knew when he said a good thing, nobody had said
> it before. Adam was not alone in the Garden of Eden, however, and does
> not deserve all the credit; much is due to Eve, the first woman, and
> Satan, the first consultant." - Mark Twain
>

What you say you have done should have been effective if
the client systems' AD objects are within the OU where the
GPO was edited and there is no higher GPO overriding that
setting (not likely for that setting).
Do you have error messages in client system event logs about
failure applying group policy?

"Winanjaya" <(E-Mail Removed)> wrote in message
news:4A774D64-585E-40D5-9647-(E-Mail Removed)...
> Yes, I am talking about Messenger Services, I am actually want to block
> NET
> SEND
>
> any idea?
>
> Thanks & Regards
> Winanjaya
>
> "Paul Adare" wrote:
>
>> In article <433B1A09-F734-47CB-8B4D-(E-Mail Removed)>, in the
>> microsoft.public.win2000.security news group, =?Utf-8?B?V2luYW5qYXlh?=
>> <(E-Mail Removed)> says...
>>
>> > Hi..
>> > below are my steps:
>> >
>> > 1. Active Directory Users & Computers
>> > 2. Right click on OU -> Properties
>> > 3. Group Policy -> Edit
>> > 4. Computer Configurations -> Windows Settings -> Security Settings ->
>> > System Services -> Messengers
>> > 5. Define this policy settings, checked, then select Disabled radio
>> > button
>> > -> Ok
>> >
>> > our clients run on Windows 2000 Pro SP4 and Win XP SP2 .. I tested on
>> > Windows 2000 Pro SP4 and not working.. meant the service still enabled
>> > and
>> > started..
>> >
>> > I need advise..
>> >
>>
>> Just to be clear we're talking about the Messenger service and not
>> Windows Messenger or MSN Messenger, correct?
>>
>> --
>> Paul Adare - MVP Virtual Machines
>> It all began with Adam. He was the first man to tell a joke--or a lie.
>> How lucky Adam was. He knew when he said a good thing, nobody had said
>> it before. Adam was not alone in the Garden of Eden, however, and does
>> not deserve all the credit; much is due to Eve, the first woman, and
>> Satan, the first consultant." - Mark Twain
>>

Hi.. I don't have any relative Event logs in my Event Viewer..and I also did
not meet any error message .. is it bugs?

Thanks & regards
Winanjaya

"Roger Abell [MVP]" wrote:

> What you say you have done should have been effective if
> the client systems' AD objects are within the OU where the
> GPO was edited and there is no higher GPO overriding that
> setting (not likely for that setting).
> Do you have error messages in client system event logs about
> failure applying group policy?
>
> "Winanjaya" <(E-Mail Removed)> wrote in message
> news:4A774D64-585E-40D5-9647-(E-Mail Removed)...
> > Yes, I am talking about Messenger Services, I am actually want to block
> > NET
> > SEND
> >
> > any idea?
> >
> > Thanks & Regards
> > Winanjaya
> >
> > "Paul Adare" wrote:
> >
> >> In article <433B1A09-F734-47CB-8B4D-(E-Mail Removed)>, in the
> >> microsoft.public.win2000.security news group, =?Utf-8?B?V2luYW5qYXlh?=
> >> <(E-Mail Removed)> says...
> >>
> >> > Hi..
> >> > below are my steps:
> >> >
> >> > 1. Active Directory Users & Computers
> >> > 2. Right click on OU -> Properties
> >> > 3. Group Policy -> Edit
> >> > 4. Computer Configurations -> Windows Settings -> Security Settings ->
> >> > System Services -> Messengers
> >> > 5. Define this policy settings, checked, then select Disabled radio
> >> > button
> >> > -> Ok
> >> >
> >> > our clients run on Windows 2000 Pro SP4 and Win XP SP2 .. I tested on
> >> > Windows 2000 Pro SP4 and not working.. meant the service still enabled
> >> > and
> >> > started..
> >> >
> >> > I need advise..
> >> >
> >>
> >> Just to be clear we're talking about the Messenger service and not
> >> Windows Messenger or MSN Messenger, correct?
> >>
> >> --
> >> Paul Adare - MVP Virtual Machines
> >> It all began with Adam. He was the first man to tell a joke--or a lie.
> >> How lucky Adam was. He knew when he said a good thing, nobody had said
> >> it before. Adam was not alone in the Garden of Eden, however, and does
> >> not deserve all the credit; much is due to Eve, the first woman, and
> >> Satan, the first consultant." - Mark Twain
> >>
>
>
>

Hi,

can you run this on one XP client. It will tell what policies are getting
applied.

gpresult /z > log.txt

and paste back the log.

--
Mike
Microsoft MVP - Windows Security

"Winanjaya" <(E-Mail Removed)> wrote in message
news:C4A25048-825D-48AB-AC6D-(E-Mail Removed)...
>
> Hi.. I don't have any relative Event logs in my Event Viewer..and I also
> did
> not meet any error message .. is it bugs?
>
> Thanks & regards
> Winanjaya
>
> "Roger Abell [MVP]" wrote:
>
>> What you say you have done should have been effective if
>> the client systems' AD objects are within the OU where the
>> GPO was edited and there is no higher GPO overriding that
>> setting (not likely for that setting).
>> Do you have error messages in client system event logs about
>> failure applying group policy?
>>
>> "Winanjaya" <(E-Mail Removed)> wrote in message
>> news:4A774D64-585E-40D5-9647-(E-Mail Removed)...
>> > Yes, I am talking about Messenger Services, I am actually want to block
>> > NET
>> > SEND
>> >
>> > any idea?
>> >
>> > Thanks & Regards
>> > Winanjaya
>> >
>> > "Paul Adare" wrote:
>> >
>> >> In article <433B1A09-F734-47CB-8B4D-(E-Mail Removed)>, in
>> >> the
>> >> microsoft.public.win2000.security news group, =?Utf-8?B?V2luYW5qYXlh?=
>> >> <(E-Mail Removed)> says...
>> >>
>> >> > Hi..
>> >> > below are my steps:
>> >> >
>> >> > 1. Active Directory Users & Computers
>> >> > 2. Right click on OU -> Properties
>> >> > 3. Group Policy -> Edit
>> >> > 4. Computer Configurations -> Windows Settings -> Security
>> >> > Settings ->
>> >> > System Services -> Messengers
>> >> > 5. Define this policy settings, checked, then select Disabled radio
>> >> > button
>> >> > -> Ok
>> >> >
>> >> > our clients run on Windows 2000 Pro SP4 and Win XP SP2 .. I tested
>> >> > on
>> >> > Windows 2000 Pro SP4 and not working.. meant the service still
>> >> > enabled
>> >> > and
>> >> > started..
>> >> >
>> >> > I need advise..
>> >> >
>> >>
>> >> Just to be clear we're talking about the Messenger service and not
>> >> Windows Messenger or MSN Messenger, correct?
>> >>
>> >> --
>> >> Paul Adare - MVP Virtual Machines
>> >> It all began with Adam. He was the first man to tell a joke--or a lie.
>> >> How lucky Adam was. He knew when he said a good thing, nobody had said
>> >> it before. Adam was not alone in the Garden of Eden, however, and does
>> >> not deserve all the credit; much is due to Eve, the first woman, and
>> >> Satan, the first consultant." - Mark Twain
>> >>
>>
>>
>>