Re: Require Policy?

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 02/23/05


Date: Tue, 22 Feb 2005 20:56:43 -0600

It might help if you disable domain cached logons which would prevent a user
from logging onto the computer if a domain controller can not be found.
Otherwise I know of know way to do such. If there is replication lag or
other Group Policy problem the client computer will have no way of knowing
this when it boots up or the user logs on and the GP version number it has
stored is compared to that in the sysvol share of the domain controller it
logs onto. You could also configure Local Group Policy as a backup to
domain/OU policy but that is very hard to manage for all but a small number
of computers. --- Steve

"Chris Cairns" <ccairns@hampton-hampton.com> wrote in message
news:OTCXS5MGFHA.1740@TK2MSFTNGP09.phx.gbl...
>I experienced a situation where the policy was not available and users were
>able to login without their policy applied. This is a real problem.
>
> Is there a way to require the policy be applied? I would like to deny
> login to users unless the policy is applied with the exception of one
> admin user. How is this done??
>
>
>
>
>



Relevant Pages

  • Re: SBS 2003 Lost all the Security Policies.
    ... i didn't use dcgpofix i used another sbs 2003 premium has example and created the policies manually. ... I know that your Default Domain Controller Security Policy or Domain Security Policy it is empty. ... DCGPOFIX.EXE will restore the Default Domain Policy and the Default Domain Controller Policy to original default settings. ...
    (microsoft.public.windows.server.sbs)
  • Re: Update site?
    ... The reason I needed to login from the same machine is - ... > Users by default are NOT allowed to logon to servers. ... You can change this in the Domain Security Policy I ... there open Domain Controller security policy. ...
    (microsoft.public.exchange.admin)
  • Re: W2K Server / XP Pro Clients / Group Policy -- LOCK TASKBAR
    ... make your dns configuration is correct in that domain controllers point ... The policy you are trying to implement is a "user" configuration policy and therefore ... > machines connecting to a Windows 2000 Domain Controller. ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: W2K Server / XP Pro Clients / Group Policy -- LOCK TASKBAR
    ... make your dns configuration is correct in that domain controllers point ... The policy you are trying to implement is a "user" configuration policy and therefore ... > machines connecting to a Windows 2000 Domain Controller. ...
    (microsoft.public.windows.server.active_directory)
  • Re: W2K Server / XP Pro Clients / Group Policy -- LOCK TASKBAR
    ... make your dns configuration is correct in that domain controllers point ... The policy you are trying to implement is a "user" configuration policy and therefore ... > machines connecting to a Windows 2000 Domain Controller. ...
    (microsoft.public.windows.server.security)

Loading