Re: Managing Group Policy on XP SP2
From: Hunter (anonymous_at_discussions.microsoft.com)
Date: 09/24/04
- Next message: SuderMan: "roaming and local profiles"
- Previous message: johndoe: "Password Complexity Requirements : can they be tweaked?"
- In reply to: d mac: "Re: Managing Group Policy on XP SP2"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 24 Sep 2004 08:08:05 -0700
Short of the first suggestion I had I guess you could try
The Knowledge Base Article - 323639 ( how to create Custom
Adm templates in windows 2000)
H
>-----Original Message-----
>Hi there,
>
>I downloaded the 842933 patch before opening the GPO on
the XP SP2
>workstation, so I haven't had any of the "The following
entry in the
>[strings] section is too long and has been truncated"
errors. But I still
>have the issue where not all the policies are showing up
on the Windows 2000
>Server vs. the XP SP2 workstation. Is this a known issue?
>
>I will try Hunter's suggestion on manually importing the
ADM files on the
>Windows 2000 server to see if that updates all the
policies on the domain
>controllers to match the same amount showing on the XP
SP2 workstation.
>
>I'll let you know how it goes.
>
>Thanks
>
>d mac
>
>"Bruce Sanderson" wrote:
>
>> http://support.microsoft.com/?kbid=842933 documents
this problem and has a
>> patch available.
>>
>> --
>> Bruce Sanderson MVP
>>
>> It's perfectly useless to know the right answer to the
wrong question.
>>
>>
>> "Hunter" <anonymous@discussions.microsoft.com> wrote in
message
>> news:1b9601c4a1a0$6a628fa0$a401280a@phx.gbl...
>> > You might try gathering up the XP .adm templates,
copying
>> > them to temp folder on the 2000 DC. Then opening the
A/D
>> > Group policy on the 2000 box right click on the
>> > Admisitrative templates container, choose add snap-in.
>> >
>> > It'll show the ones currently in use in the wnnt/inf
>> > folder, Browse over to the new ones in the temp
folder
>> > and select add, it should ask you about overwriting
etc.
>> >
>> > Choose yes.
>> >
>> > Once the new ones are copied in you will probably get
a
>> > bunch messages stating the new ones are too long or
>> > something, but you'll have to hunt down an update for
this
>> > I think I found it at microsoft tech experts page on
XP,
>> > but it didn't seem to want to be found with search.
>> >
>> > Anyways, maybe that will help.
>> >
>> > Regards
>> >
>> > Hunter
>> >
>> >
>> >
>> >>-----Original Message-----
>> >>I updated our GPO on our Windows 2000 domain
controllers
>> > with the latest ADM
>> >>files from XP SP2. I did this by opening up the GPO
on a
>> > Windows XP Pro
>> >>workstation with SP2 and it automatically replicated
the
>> > ADM files to our
>> >>domain controllers. See document at
>>
>>http://www.microsoft.com/technet/prodtechnol/winxppro/mai
n
>> > tain/mangxpsp2/mngdepgp.mspx
>> >>
>> >>However, it seems like not all of the ADM files are
>> > replicating to the
>> >>Windows 2000 servers. For example, in the policy
>> > path "Administrative
>> >>Templates\Network\Network Connections\Windows
>> > Firewall\Domain Profile" there
>> >>are only 12 policies listed on the Windows 2000 Server
>> > but on the XP SP2 box,
>> >>there are 14 policies. The two that are missing are:
>> >>
>> >>Windows Firewall: Define program exceptions
>> >>Windows Firewall: Define port exceptions
>> >>
>> >>Is this by design or is there something wrong with the
>> > replication process?
>> >>It would be nice to be able to define program
exceptions
>> > because there are a
>> >>couple programs within our environment that won't work
>> > unless we can exclude
>> >>them. It would be preferable to do this through GP
>> > instead of manually going
>> >>to each machine and defining the program exceptions.
>> >>
>> >>Thanks,
>> >>
>> >>d mac
>> >>.
>> >>
>>
>>
>>
>.
>
- Next message: SuderMan: "roaming and local profiles"
- Previous message: johndoe: "Password Complexity Requirements : can they be tweaked?"
- In reply to: d mac: "Re: Managing Group Policy on XP SP2"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
