Without AD local security applies to all accounts
equaly that are able to read system32\GroupPolicy
IIRemberC system policy is processed during login.
gpupdate only handles group policy, not system policy.
The first line provides info on how to exempt admin
accounts but use local group policy to control the rest.
You do however need to remove the Deny to admins
in order to edit/modify group policy settings, and then
remember to put it back on.
--
Roger Abell
Microsoft MVP (Windows, Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Jay" <(E-Mail Removed)> wrote in message
news:08c801c38229$cd6f2870$(E-Mail Removed)...
> Is there a way in WinXP that I can initiate a system
> policy (the .pol) update from the command line?
>
> I am using the NT4 system policy on XP and I noticed that
> the result is not consistent, sometimes the policy will
> get loaded and sometimes it won't (logout and log back in
> to get it updated). I am trying to find a way to update
> the policy manually every time a user logs in or
> periodically. BTW, I am changing the
> \HKEY_LM\System\CurrentControlSet\Control\Update stuff to
> get the policy to loaded. The "GPUPDATE" command does not
> seem to initiate this reload (didn't connect to the UNC
> path to grab the .pol file).
>
> The reason I am using NT4 pol is because that's the only
> way (I know of) that I can apply policy to a local user
> and not limit administrators access. The local security
> policy limits also the administrator account and make this
> task impossible. AD is not an option here so GPO is out of
> the question. (Any other suggestion to do this would be
> welcomed)
>
> THANKS!
|
Similar Threads
