Re: User Reg Keys and User Policy "interval"



Hi Jerold,

Thanks for the tip. I'm sure the problem is related to the GP version
number, but this raises more questions than it answers:

1. I'm not having trouble with the Internet Explorer settings as such, so
there's not much point setting the machine policy that tell them to apply
even if they haven't changed (although it might be worth trying that
anyway).

2. Your tips imply that group policies will never be applied a second time
unless the Administrator keeps editing them (thereby forcing the version
number to update). The whole idea of Group Policy is that it's supposed to
"enforce" settings, so if the user changes something, the policy is supposed
to revert at next logon. If this doesn't work, it doesn't make any sense to
me?

If I ask the question in a different way, can anyone tell me how to do this
simple task:-

I want to set up my user environments so the user will see "Log Off" as the
default on their screens every time they choose "Start : Shutdown". I have
an ADM file that achieves this the first ever time I apply the group policy,
but the policy is ignored on subsequest user logons.

Thanks again for all the help!

--
Gerry Hickman


"Jerold Schulman" <Jerry@xxxxxxxxxx> wrote in message
news:ma9l92prkd9a6nplaoplodbglp9pgrqu91@xxxxxxxxxx
On Thu, 22 Jun 2006 13:19:29 +0100, "Gerry Hickman"
<gerry1uk@xxxxxxxxxxxx> wrote:

Hi,

I've had group policies set up for some time and in general it all works
as
expected with the built-in policies, however I set up a policy to change
an
HKCU registry setting today and it's not working as expected! It works
the
first ever time they log in after the policy has been changed, but not
after
that.

As I understand it, the "interval" should not be an issue here, because
policies are supposed to be refreshed EVERY time they log in?

The setting I'm working with is the one that defaults the logoff dialog
"Log
Off", "Restart", "Shutdown" and I can see the GP editor has correctly
created a Registry.pol file on the DC. The first ever time I logged in as
the test user, I notice the setting had been correctly changed, I logged
off, then on, and it doesn't work. I then changed the Group Policy, and
it
worked straight away, but only once!

The DCs are Win2k3 and the clients are Win2k.

See tip 10101 » Internet Explorer Maintenance Group Policies do NOT apply
during subsequent logons to Windows 2000 client computers? 30-Jan-06
in the 'Tips & Tricks' at http://www.jsifaq.com

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com


.



Relevant Pages

  • Re: Different security for different users
    ... MS network with over 10 nodes. ... Group policy, no matter what its name infers, has nothing to do with user ... Group policies are groups of diffrent settings that cover evreything from ... "Frank F." ...
    (microsoft.public.win2000.general)
  • RE: Cant set Local Security policies. They fail to save
    ... I imported the default Group Policies from a fresh SBS Installation as per ... "Windows cannot query for the list of Group Policy objects. ... > Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: New guy question
    ... How to Modify the Default Group Policy Refresh Interval ... In Windows XP and Windows Server 2003 you can use command line tool gpupdate ... Re-post if you need more information about group policies. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policies have stopped working.
    ... > We've had Group Policies running for well over a year here with little ... > Group Policy was applied from: ... > My AD is split geographically with a US container with seperate Users ... > There is also a EU container with seperate Users and Computers ...
    (microsoft.public.win2000.group_policy)
  • Re: IE Maint Only settings missing?
    ... but that is not IE Maintenance. ... >> reinstalled the IEAK6 and grabbed the original adm file from it's folder. ... the Windows Group Policy Guide is out from Microsoft Press!!! ... >>> GPOGUY Blog: http://blogs.dirteam.com/blogs/gpoguy ...
    (microsoft.public.windows.group_policy)

Quantcast