Policies with NT server , NTand 2000 desktop?

[sbovaird]

I would like to create a policy that would restrict users from running certain application and limit their desktop and start menu.

I've done this in the past with NT desktops but never 2000. The whole process is a little foggy right now.

Could some one give me the steps to create a seperate policy for the 2000 machines. Or should one policy work for both OS'?

Any help would be greatly appreciated.


Thanks

Sterling

 

[djhawthorn]

One policy on an NT4 server should work for both NT4 and W2K clients.

W2K supports the "older" policies of NT4, as well as a lot more policies (should you have a W2K server in place). MCSE NT4/W2K

 

[sbovaird]

I have a working policy that I've been using for NT clients but when I login to a 2000 client the policy only partially works.

The other thing is if I open up a policy using Poledit on a 2000 client I get a completely different sets of options under each policy.

Is there another version of Poledit I need for 2000?

 

[GiaBetiu]

Assigning policies in Win2k is based on Group Policies Objects (GPOs).
It's flexible, powerfull and easy to use.
So, for your win2k workstations you can use those GPOs facilities.
For NT4 machines you can use the old .POL files also.

How to use GPO?
GPO are objects with policies for Machine and/or User. Using Administartive Tools, "AD Users and Computers" for example you can go to an OU or a domain (Properties/Group Policies) and to create and link such GPOs.
Of course there are some rules of applying it. And don't forget that if you want to be applyed to some machines, then those should be part of that container! If it's about users, then same story for users. Gia Betiu
m.betiu@chello.nl
Computer Eng. CNE 4, CNE 5

 

[sbovaird]

Gia,

I don't use Active Directory, can I still implement something like a policy.

 

[GiaBetiu]

No. Without AD you can have just local policies.
(Going on every computer and make the settings that you want).
What can be a trick is to make your customized .inf file, and import it then into every computer local policies.
You can do this with mmc / add snapin/ Security Analyses and Configuration. Gia Betiu
m.betiu@chello.nl
Computer Eng. CNE 4, CNE 5