Disable Messenger Service thru PDC

[Guest]

Dear All,

I have a Windows 2000 SP4 runs as PDC with more than 150 members (Win 2000
Pro & XP), I need to disable "Messenger Service" of each client's PC, is
there any way to Disable "Messenger Service" of each member thru PDC? so I
don't need to come into each client PC and disable the service manually..

Please help..

Thanks & Regards
Winanjaya

 

[Miha Pihler [MVP]]

Create new group policy and e.g. link it to OU (Organization Unit) where
your Windows XP and Windows 2000 clients are in (computer accounts). Change
the following policy Computer Configuration > Windows Settings > Security
Settings > System Services. Here find a service called Messenger and double
click on it. Check the checkbox next to "Define this policy setting" and
select "Disabled". Close all Windows related to Group Policy Editor. See if
it applies desired settings on your client, but not it can take some time
(few hours) before all clients pick up new settings.

 

[Guest]

Thanks, I tried it to a client ' s PC .. but it does not work, I meant the
Messenger service still enabled and started..I also had restarted the
client's PC but the same problem still occurs ..

any idea?

Thanks & Regards
Winanjaya

 

[Miha Pihler [MVP]]

Can you please tell me exactly what you did (all steps).

Can you also tell me what is version of the client (e.g. Windows 2000 SP4,
Windows XP SP1, ...)

 

[Guest]

Hi..
below are my steps:

1. Active Directory Users & Computers
2. Right click on OU -> Properties
3. Group Policy -> Edit
4. Computer Configurations -> Windows Settings -> Security Settings ->
System Services -> Messengers
5. Define this policy settings, checked, then select Disabled radio button
-> Ok

our clients run on Windows 2000 Pro SP4 and Win XP SP2 .. I tested on
Windows 2000 Pro SP4 and not working.. meant the service still enabled and
started..

I need advise..

Thanks a lot in advance

Regards
Winanjaya

 

[Paul Adare]

microsoft.public.win2000.security news group, =?Utf-8?B?V2luYW5qYXlh?=

Hi..
below are my steps:

1. Active Directory Users & Computers
2. Right click on OU -> Properties
3. Group Policy -> Edit
4. Computer Configurations -> Windows Settings -> Security Settings ->
System Services -> Messengers
5. Define this policy settings, checked, then select Disabled radio button
-> Ok

our clients run on Windows 2000 Pro SP4 and Win XP SP2 .. I tested on
Windows 2000 Pro SP4 and not working.. meant the service still enabled and
started..

I need advise..

Just to be clear we're talking about the Messenger service and not
Windows Messenger or MSN Messenger, correct?

--
Paul Adare - MVP Virtual Machines
It all began with Adam. He was the first man to tell a joke--or a lie.
How lucky Adam was. He knew when he said a good thing, nobody had said
it before. Adam was not alone in the Garden of Eden, however, and does
not deserve all the credit; much is due to Eve, the first woman, and
Satan, the first consultant." - Mark Twain

 

[Guest]

Yes, I am talking about Messenger Services, I am actually want to block NET
SEND

any idea?

Thanks & Regards
Winanjaya

 

[Roger Abell [MVP]]

What you say you have done should have been effective if
the client systems' AD objects are within the OU where the
GPO was edited and there is no higher GPO overriding that
setting (not likely for that setting).
Do you have error messages in client system event logs about
failure applying group policy?

 

[Guest]

Hi.. I don't have any relative Event logs in my Event Viewer..and I also did
not meet any error message .. is it bugs?

Thanks & regards
Winanjaya

 

[Miha Pihler [MVP]]

Hi,

can you run this on one XP client. It will tell what policies are getting
applied.

gpresult /z > log.txt

and paste back the log.

 

[Guest]

Below is the result when gpresult -z > c:\test.log

Microsoft (R) Windows (R) 2000 Operating System Group Policy Result tool
Copyright (C) Microsoft Corp. 1981-1999


Created on Monday, August 28, 2006 at 4:31:02 PM


Operating System Information:

Operating System Type: Professional
Operating System Version: 5.0.2195.Service Pack 4
Terminal Server Mode: Not supported

###############################################################

User Group Policy results for:



Domain Name: HO
Domain Type: Windows 2000
Site Name: Default-First-Site-Name

Roaming profile: (None)
Local profile: C:\Documents and Settings\sri

The user is a member of the following security groups:



###############################################################

Last time Group Policy was applied: Monday, August 28, 2006 at 3:27:32 PM



###############################################################

Computer Group Policy results for:



Domain Name: HO
Domain Type: Windows 2000
Site Name: Default-First-Site-Name


The computer is a member of the following security groups:

BUILTIN\Administrators
\Everyone
NT AUTHORITY\Authenticated Users

###############################################################

Last time Group Policy was applied: Monday, August 28, 2006 at 3:32:59 PM


===============================================================


The computer received "Registry" settings from these GPOs:

Local Group Policy


===============================================================
The computer received "Security" settings from these GPOs:

Local Group Policy


===============================================================
The computer received "EFS recovery" settings from these GPOs:

Local Group Policy

 

[Guest]

Hi,

Below are what I met when gpresult /z test.log


Microsoft (R) Windows (R) 2000 Operating System Group Policy Result tool
Copyright (C) Microsoft Corp. 1981-1999


Created on Monday, August 28, 2006 at 4:31:02 PM


Operating System Information:

Operating System Type: Professional
Operating System Version: 5.0.2195.Service Pack 4
Terminal Server Mode: Not supported

###############################################################

User Group Policy results for:



Domain Name: HO
Domain Type: Windows 2000
Site Name: Default-First-Site-Name

Roaming profile: (None)
Local profile: C:\Documents and Settings\sri

The user is a member of the following security groups:



###############################################################

Last time Group Policy was applied: Monday, August 28, 2006 at 3:27:32 PM



###############################################################

Computer Group Policy results for:



Domain Name: HO
Domain Type: Windows 2000
Site Name: Default-First-Site-Name


The computer is a member of the following security groups:

BUILTIN\Administrators
\Everyone
NT AUTHORITY\Authenticated Users

###############################################################

Last time Group Policy was applied: Monday, August 28, 2006 at 3:32:59 PM


===============================================================


The computer received "Registry" settings from these GPOs:

Local Group Policy


===============================================================
The computer received "Security" settings from these GPOs:

Local Group Policy


===============================================================
The computer received "EFS recovery" settings from these GPOs:

Local Group Policy

 

[Miha Pihler [MVP]]

Can you please run this on Windows XP client (you run this on Windows
2000)...