Silly security policy question

[Lori Eby]

Hello,

I am new to a mixed workgroup environment running NT 4.0,
Windows 2000 and XP. For some time, we have been running
poledit.exe from NT 4.0 to lock down our desktops that
reside in a public environment. We have been applying
this policy to both NT 4.0 and Windows 2000. For the
first time today, we were trying to apply the policy to
Windows XP and have not had very much luck. I have been
unable to find any definitive documentation that states
when poledit.exe became obsolete. Can I use it on XP or
not?

Thanks in advance for any advice.

Lori Eby

 

[Torgeir Bakken (MVP)]

I am new to a mixed workgroup environment running NT 4.0,
Windows 2000 and XP. For some time, we have been running
poledit.exe from NT 4.0 to lock down our desktops that
reside in a public environment. We have been applying
this policy to both NT 4.0 and Windows 2000. For the
first time today, we were trying to apply the policy to
Windows XP and have not had very much luck. I have been
unable to find any definitive documentation that states
when poledit.exe became obsolete. Can I use it on XP or
not?

Hi

It is still supported for WinXP:
http://www.microsoft.com/technet/prodtechnol/winxppro/proddocs/PoleditAD.asp

Some more information from Windows XP Resource Kit:

The role of Administrative Templates
http://www.microsoft.com/technet/prodtechnol/winxppro/proddocs/ADMinAD.asp

Windows NT 4.0 system policies
http://www.microsoft.com/technet/prodtechnol/winxppro/proddocs/tattooing.asp

 

[Mike Brannigan [MSFT]]

Hello,

I am new to a mixed workgroup environment running NT 4.0,
Windows 2000 and XP. For some time, we have been running
poledit.exe from NT 4.0 to lock down our desktops that
reside in a public environment. We have been applying
this policy to both NT 4.0 and Windows 2000. For the
first time today, we were trying to apply the policy to
Windows XP and have not had very much luck. I have been
unable to find any definitive documentation that states
when poledit.exe became obsolete. Can I use it on XP or
not?

Lori,

Poledit became obsolete with Windows 2000 and Active Directory Group Policy
Objects.
If you are in an Active Directory domain environment with Windows 2000
and/or Windows XP machines you should not use ntconfig.pol files and
poledit. You should be using GPOs for those machines.

You can use ntconfig.pol with both Windows 2000 and XP but you should not,
there are better more manageable solutions available in GPOs.

--
Regards,

Mike
--
Mike Brannigan [Microsoft]

This posting is provided "AS IS" with no warranties, and confers no
rights

Please note I cannot respond to e-mailed questions, please use these
newsgroups

 

[Lori]

-----Original Message-----


Lori,

Poledit became obsolete with Windows 2000 and Active Directory Group Policy
Objects.
If you are in an Active Directory domain environment with Windows 2000
and/or Windows XP machines you should not use ntconfig.pol files and
poledit. You should be using GPOs for those machines.

You can use ntconfig.pol with both Windows 2000 and XP but you should not,
there are better more manageable solutions available in GPOs.

--
Regards,

Mike
--
Mike Brannigan [Microsoft]

This posting is provided "AS IS" with no warranties, and confers no
rights

Please note I cannot respond to e-mailed questions, please use these
newsgroups




.
Thanks for the information, which was just what I

expected, but I am in a workgroup environment, not a
domain environment so GPO is pretty much out of the
question. We are trying to figure out how to use the
Local Group Policy and apply it to only one user. Any
suggestions?

Also, can you recommend any online resoureces for
information on local security policy on Windows XP? I
have not been very successful on the MS site itself.

Thanks.