Machine based Group Policy

[dietergw]

Hi

I havent worked with GPOs much but want to set up a simple policy which will make some chnagess to the registry settings on the PCs. I started by creating a test ou from which i could test policies.I then created a custom adm file which i added to the gpo machine settings of my test ou.

I logged into the machine which i put into the OU for testing and nothing had changed. I refreshed the policy from the cmd line, still nothing. Obviously i have made misatke somewhere is it permissions i need to add or what am i missing here?

Your help is much appreciated.

"Extreme situations demand extreme responses."

 

[aftertaf]

can you post your custom adm file..
what are the chnages you want to make to the registry?

Aftertaf

getting quite good at sorting out Windows problems...
An expert when it comes to crashing Linux distributions (mdk, debian - nothing withstands me)

 

[dietergw]

OK here it is

CLASS MACHINE

CATEGORY !!Custom
KEYNAME "System\CurrentControlSet\Services\W32Time\Parameters"

POLICY !!timesync

EXPLAIN !!ExpTimeSync

VALUENAME "Period"
VALUEON "DailySpecialSkew" ;65531
VALUEOFF "SpecialSkew" ;65532

PART !!RTStxt CHECKBOX
VALUENAME "ReliableTimeSource"
END PART

PART !!NTPtxt DROPDOWNLIST REQUIRED
VALUENAME "NtpServer"
ITEMLIST
NAME !!HeadOffice VALUE "ip address" DEFAULT
NAME !!Bloemfontein VALUE ip address
NAME !!PortElizabeth VALUE ip address NAME !!Capetown VALUE ip address
NAME !!Durban VALUE ip address
END ITEMLIST
END PART

END POLICY

END CATEGORY

[strings]
Custom="Custom Settings"
timesync="PC Time Synchronisation"
ExpTimeSync="This policy configures time synchronisation on PC's and servers.\n\nThe policy when enabled automatically changes the period between time synchronisations. The period will be set to check once every 45 minutes until successful one time, then once every day.\n\nEnabling Reliable Time Source tells any client connecting to the server that it is a reliable time source. This should only be configured on servers.\n\nNTP Server is the server to which the client must connect to synchronise its time."
RTStxt="Reliable Time Source"
Periodtxt="Period"
NTPtxt="NTP Server"
HeadOffice="srlpdc01"
Bloemfontein="srbldc01"
PortElizabeth="srpedc01"
Capetown="srctdc01"
Durban="srdbdc01"


"Extreme situations demand extreme responses."

 

[aftertaf]

a bit off subject, but the time synchronisation, if i believe what i hear from different sources here, it best left to windows itself.

You should have the PDC emulator setting itself with an external source, then all the rest of the domain soprts itself out from here...
search the posts in this forum on time synchro...
there are some good explanations and best practices...


Aftertaf

getting quite good at sorting out Windows problems...
An expert when it comes to crashing Linux distributions (mdk, debian - nothing withstands me)

 

[dietergw]

Yeah I know but its more of personal interest now. I would like to know why it doesnt work, it doesnt mean im going to implement it.

"Extreme situations demand extreme responses."