×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Contact US

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

System policies

System policies

System policies

(OP)
I am setting up a 4 node NT network, 1 NT Server 4.0 SP5 and 3 NT WS 4.0 SP5. We will have 3 different types of users, each needing varying degrees of functionality. 1 type will be completely locked down (ie no run command, no registry editor, no control panel), 1 with middle of the road priviledges (can change display but no registry editor), 1 poweruser (almost admin). I want to setup policies using system policy editor on the server for centralized admin.

I have all the policies set on the server and when I logon as each type of user, I get the desired settings. However, when I logon from the workstations, I have absolutely no policies in force. The ntconfig.pol file is in the netlogon share (c:\winnt\system32\repl\import\scripts). I am not running policy editor on the workstations.

Any ideas would be greatly appreciated.

RE: System policies

Have you verified through Network Neighborhood from one of the workstations that the netlogon share is actually originating from that folder? (A collegue didn't set up ther server and change the default location?) This would also verify that various user accounts can read the share from the workstation.

Also, are the machines members of the domain?

RE: System policies

(OP)
FIGURED IT OUT!! Sorry for the excitement, but when you spend a month off and on a problem, you're happy when it falls into place.

Anyway, after searching for the umpteenth time, I found reference to MS online seminar on policies and profiles. There was one slide that mentioned troubleshooting policies. The one that helped (other than the obvious check protocols, shares, domains (thanks though, MasterRacker)) was to do a registry search for UpdateMode. I had 3 occurrences: hkey_local_machine\system\controlset0001\control\update, ..\controlset0002\.., and ..\currentcontrolset\.. Once I changed those values to 1 to enable automatic update rather than manual, the policies worked like a charm.

I find it odd that all 3 workstations would have this setting. Could it be because I never ran SPE on them or setup a policy directly on the machine?

RE: System policies

Update mode would one of my next suggestions. Interesting, because automatic update is supposed to be the default setting on workstation. You shouldn't need to run SPE on a workstation, it should start picking up policies from a domain controleer as soon as the machine is joined to the domain.

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login


Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close