User playing wih policy editor

[paulovey]

Hi,

One of our users has found the policy editor and decided to have a play with it, not to sure what they where doing that have managed to lock out access to changing the desktop.

When you right click on the desktop it gives the message

"Your system administrator has disabled this function".

Now i thought there would be a ".pol" to go and edit through policy editor, but a search on the hard drive will not show any files of this type.

So is it just a case of running policy editor, and changing the computer rather than the user profile, and resaving the changes???

Paul

 

[Pinkman]

Policies are crazy - I have never been a big fan of them. But, you can always count on users to keep you on your toes.

Anyway, make sure that you are on the PDC and check the Netlogon share directory. There should be a NTConfig.pol there - unless the user created a new one.

Once you have found the profile he/she has modified you have to "undo" what they have done.

I believe (hopefully if I am wrong someone will correct me) that if you create a new policy with new settings it WILL NOT undo what the user has done because NT takes the most restrictive policy - which is the one you do not want.

Bottom line - you have to find the .pol that the user changed. You should be able to map to it by \\PDCservername\Netlogon

Hope this helps and good luck!

Pinkman MCSE, CCA