Groupe Policy remote update ?

[Guest]

Dear all

I have setup up a standard deployement procedure of our Windows 2000 professional system, by using the sysprep utility
Based on that I have define on this image installation Local policy wich have been defined restricted to all users except the Administrator according to Microsoft procedure for doing so

Which means that after deployement, our system local security is

- Remove of Add/Remove hardware and software from control pane
- Do not allowed windows updat
- Disable edition of registry databas
- ....and mor

Only Adminstrator user has no restriction

Now it happen that one of my customer would like to be able to hand windows update itself. For this it is needed to edition just one parameter in Local froup policy

The problem is that if the system is already at customer site m which could be far away, is there an easy solution to just enable the Windows update from initial policy settings.

It would mean, can I send to the customer by mail the modified file ..\system32\GroupPolicy\Machine\Registry.pol
That will have that windows update enable

Thanks for your advise and hel

regard
Calderara Serg
Maillefer S.

 

[Darren Mar-Elia]

The answer is a qualified "yes". You can just create an updated registry.pol
file and have them copy it over their existing local one. However, you
should also send them the updated gpt.ini file that is found in the local
GPO directory as well, because if you send just the .pol file, and don't
update the local GPO version number, the machine will not know that the
local GPO has changed and will not re-process it with the new setting.

Hope that helps.

Darren

Dear all,

I have setup up a standard deployement procedure of our Windows 2000

professional system, by using the sysprep utility.

Based on that I have define on this image installation Local policy wich

have been defined restricted to all users except the Administrator according
to Microsoft procedure for doing so.

Which means that after deployement, our system local security is :

- Remove of Add/Remove hardware and software from control panel
- Do not allowed windows update
- Disable edition of registry database
- ....and more

Only Adminstrator user has no restriction.

Now it happen that one of my customer would like to be able to hand

windows update itself. For this it is needed to edition just one parameter
in Local froup policy.

The problem is that if the system is already at customer site m which

could be far away, is there an easy solution to just enable the Windows
update from initial policy settings.?

 

[Guest]

Thnaks a lot with your answer

By the way, wen this new .pol file and gpo.ini file is copied over the existing system policy, do I need to log on and off with all user account in order to take in account that new policy, or is it simply the ini file which does that

regard
serge