Group policy no domain

M

Michael Triber

Can I use this server as a basic server that is not a domain controller and
use the group policy for remote logins to the server 2008?
 
F

Florian Frommherz [MVP]

Michael,

Michael said:
Can I use this server as a basic server that is not a domain controller and
use the group policy for remote logins to the server 2008?

I not sure I follow you - what is it you want to do? Group Policy is for
managing machines and user desktops from remote or locally. They
basically do not provide logon functionality. That's what AD does. Can
you elaborate a little more what you're trying to do?

cheers,

Florian
 
M

Michael Triber

Hello,

What I have is a remote connection that can not change the zone settings in
IE and the only way I think this can be done is by group policy changes. Is
this correct?

Florian Frommherz said:
Michael,

Michael said:
Can I use this server as a basic server that is not a domain controller and
use the group policy for remote logins to the server 2008?

I not sure I follow you - what is it you want to do? Group Policy is for
managing machines and user desktops from remote or locally. They
basically do not provide logon functionality. That's what AD does. Can
you elaborate a little more what you're trying to do?

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
 
F

Florian Frommherz [MVP]

Michael,

Michael said:
What I have is a remote connection that can not change the zone settings in
IE and the only way I think this can be done is by group policy changes. Is
this correct?

That is true. In order to roll out a setting like this to a number of
machines, you'd need to have them in an Active Directory domain as
members. If you have no domain - as I think you did imply this with your
first post - you need to make the changes in one of the machine's Group
Policy Editor (gpedit.msc) and copy the "Group Policy" folder in
system32 to all other machines manually.

cheers,

Florian
 
M

Michael Triber

So how do I configure the policy first before I copy it to the desktop?

Florian Frommherz said:
Michael,

Michael said:
What I have is a remote connection that can not change the zone settings in
IE and the only way I think this can be done is by group policy changes. Is
this correct?

That is true. In order to roll out a setting like this to a number of
machines, you'd need to have them in an Active Directory domain as
members. If you have no domain - as I think you did imply this with your
first post - you need to make the changes in one of the machine's Group
Policy Editor (gpedit.msc) and copy the "Group Policy" folder in
system32 to all other machines manually.

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
 
F

Florian Frommherz [MVP]

Michael,

Michael said:
So how do I configure the policy first before I copy it to the desktop?

Start gpedit.msc on a client and navigate to
User Configuration\Administrative Templates\Windows Components\Internet
Explorer\Internet Control Panel\Security Page\Site to zone assignment
list and make your changes there.

cheers,

Florian
 
M

Michael Triber

Do I have to install something to run gpedit.msc?

Thanks for your help.

Florian Frommherz said:
Michael,

Michael said:
So how do I configure the policy first before I copy it to the desktop?

Start gpedit.msc on a client and navigate to
User Configuration\Administrative Templates\Windows Components\Internet
Explorer\Internet Control Panel\Security Page\Site to zone assignment
list and make your changes there.

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
 
F

Florian Frommherz [MVP]

Michael,

Michael said:
Do I have to install something to run gpedit.msc?

no. You need to have a Windows 2000, Windows XP Prof or Vista Business
and above station to run it.

cheers,

Florian
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top