Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Hiding drives using GPO 1

Status
Not open for further replies.

savvyuser

Technical User
Apr 26, 2004
50
PH
Guys,

Anybody here knows why my local C drive still showing up to the user even I enabled Hiding C drives at GPO. I checked the registry and it showed the value 0x0000004(4).

Please help!
 
Is their a local policy on the machine, or a higher domain policy taking affect?
Is their a script which might cancel this?
 
I'm not sure perhaps there is a local policy setup by previous administrator. I have a script that would delete items in the registry. Is it conflicting to the GPO I made? How could I disabled higher domain policy? I checked block inheritance as well as no override.

By the way, do you have idea how to stop yahoo messenger popping up during startup using GPO?

Thanks in advance buddy!!!!
 
To stop higher domain GPOs u need to make sure any in an above container has not got "block policy inheritence", otherwise you have it right.
Can't help on the Yahoo Messenger thing other than moving it out of the registry and startup (use MSCONFIG), then the user would have to initiate it themselves.
 
Just a note... remember:
L <-- First
S <-- Second
D <-- Third
OU <-- Last

The OU's policy(s) take higher precedence of any "L"ocal policy- Are you using Loopback Processing on the OU?

Brandon
 
Thanks guys, I really appreciate your help. @bran Yes, I used loopback processing on the OU.

Is it ideal I used block inheritance for the OU group policy only? I have 10 OU's in which each policy has unique configuration to each other security pol. How can I disable Local Policy? Previous admin had set local security on each machine which is very tedious keep repeating the setup.

Also, I disabled link for the domain default policy.
 
That's a good question as far as how to prevent local policies... if your AD is working correctly you shouldn't have to worry about it (as long as you have a policy that fixes/changes what the Local Policy does)- because last policy wins... in this case the OU policy will take higher precedence.

HTH
Brandon
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top