Re: W2K Server / XP Pro Clients / Group Policy -- LOCK TASKBAR

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 08/28/04 

Date: Sat, 28 Aug 2004 17:34:24 -0500

First off, make your dns configuration is correct in that domain controllers point
only to themselves or other domain controllers as their preferred dns server in
tcp/ip properties by assigned static IP address as shown by Ipconfig /all. Then
W2K/XP/2003 domain member computers must point only to domain controllers running dns
with the AD domain zone and never an ISP dns server. Run first netdiag and then
dcdiag on your domain controller to see if it configured correctly as a domain
controller. Failed tests/errors/warnings may indicate a problem particularly relating
to dns. Then run netdiag on a domain computer you are having a problem with looking
for the same relating to dns, dc discovery, kerberos, or trust relationship/secure
channel. These are free support tools on the install disk in the support/tools folder
for the appropriate operating system.

The policy you are trying to implement is a "user" configuration policy and therefore
the policy needs to be configured based on the location of the user accounts you want
it to apply to. If they are in the default users container, configure domain GPO. If
they are in an Organizational Unit, then the policy should be configured for that OU.
Group Policy can also apply to an administrator unless that user is in a different
container not subject to the GPO or the GPO is "filtered" to not apply [deny apply]
to the administrators group in the security properties of the GPO. Domain user
configuration of Group Policy will not apply to "local" users logging onto a domain
computer. If you do find the policy also applying to local users check to see it has
been applied in Local Security Policy via gpedit.msc. Use Gpresult to see what GPO's
are being applied to a computer and user while logged onto that domain computer. When
used with the /v switch it will give much more detailed info about policies and
settings being applied to try and track down what is going on. If you do that you may
want to pipe it to a text file as in [ gpresult /v > file.txt ]. --- Steve

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/gpresult.mspx
-- gpresult

"Richard Morey" <rwmorey71@hotmail.com> wrote in message
news:OHEOn6TjEHA.3016@tk2msftngp13.phx.gbl...
> Hi,
>
> I need some help with the group policy editor.. I have Windows XP Pro
> machines connecting to a Windows 2000 Domain Controller. The user accounts
> are on the domain controller and I am logging onto the domain from the
> client machine without any problem. I have the user profiles mapping the U:
> drive to a network share (\\server\userdata\%username%) and that is all
> working fine.
>
> My problem is this -- the users are currently unable to move the taskbar
> ("lock the taskbar" is checked and when I click on it, it does not turn off)
> and when the user changes the settings of the start menu to "Classic Start
> Menu" the settings takes effect but is lost the next time the user logs in.
>
> I have changed the setting "Disable Changed to the Start Menu and Task Bar"
> in the Group Policy editor (through the MMC) to "Disable" for the group
> policy for both the DEFAULT DOMAIN POLICY and the DEFAULT DOMAIN CONTROLLER
> POLICY, but the user is still unable to make the changes mentioned above.
>
> My question is -- which of the two group policies should I be editting? (or
> is there a different one all together?) and have I changed the "Disable
> Changed to the Start Menu and Task Bar" setting correctly for what I want to
> do? and finally, are there other changes I have to make to give the users
> the ability to change the taskbar?
>
> I would also like to redirect the location of the MY DOCUMENTS folder to the
> "U:" drive, but when I try changing this on the users desktop, the O/S won't
> let me make the change, and when I've tried to change this setting in the
> group policy this has not taken effect either.
>
> Finally, I have put myself in the ADMINISTRATORs group on the Win2K server
> and even I can't change my taskbar or startmenu..
>
> Thanks
>
> Rich
>
>

Relevant Pages

  • Re: W2K Server / XP Pro Clients / Group Policy -- LOCK TASKBAR
    ... make your dns configuration is correct in that domain controllers point ... The policy you are trying to implement is a "user" configuration policy and therefore ... > machines connecting to a Windows 2000 Domain Controller. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: W2K Server / XP Pro Clients / Group Policy -- LOCK TASKBAR
    ... make your dns configuration is correct in that domain controllers point ... The policy you are trying to implement is a "user" configuration policy and therefore ... > machines connecting to a Windows 2000 Domain Controller. ...
    (microsoft.public.windows.server.active_directory)
  • Re: W2K Server / XP Pro Clients / Group Policy -- LOCK TASKBAR
    ... make your dns configuration is correct in that domain controllers point ... The policy you are trying to implement is a "user" configuration policy and therefore ... > machines connecting to a Windows 2000 Domain Controller. ...
    (microsoft.public.windows.server.security)
  • Re: W2K Server / XP Pro Clients / Group Policy -- LOCK TASKBAR
    ... make your dns configuration is correct in that domain controllers point ... The policy you are trying to implement is a "user" configuration policy and therefore ... > machines connecting to a Windows 2000 Domain Controller. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: RENDOM /end fails
    ... see Help and Support Center at ... DNS server IP address: 154.15.251.166 ... For computers and users to locate this domain controller, ... This is not a recommended security configuration. ...
    (microsoft.public.windows.server.active_directory)