Re: Change specific registry settings with Group Policy

Hmmmmm......anyway to stop the caching of doman credentials?

"Steven L Umbach" wrote:

> You would have to create a local user account for them to logon to. If they
> logon to their computer with cached domain credentials then Group Policy
> settings will still apply. --- Steve
>
>
> "JB" <JB@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:E3F7B44C-3CE3-4449-ABBC-61B560C0BC71@xxxxxxxxxxxxxxxx
> >I have one that I do NOT want to persist when my users are off the domain.
> >We
> > use a proxy server on campus, but the teachers' laptops are holding the
> > ProxEnable setting when at home. How do I stop THAT one?
> >
> > "Chamber" wrote:
> >
> >> Yes, I apologize for not making that clear in my posting. It does make
> >> that
> >> somewhat apparent in the document I used. I created one with multiple
> >> just
> >> as you show below. Thanks for clarifying and thanks for the new link!
> >> --
> >> Chamber
> >>
> >>
> >> "Steven L Umbach" wrote:
> >>
> >> > This link might be easier to understand. It was for me for the more
> >> > simple
> >> > settings that are either enabled or disabled.
> >> >
> >> > http://thelazyadmin.com/index.php?/archives/125-Creating-Custom-ADM-Templates.html
> >> >
> >> > To the original poster - you do not need to create a custom template
> >> > for
> >> > every registry setting. Below is a simple .adm template with multiple
> >> > settings using the same keyname. The explain line is optional and is
> >> > what
> >> > will show in the explanation box when you configure the setting. The
> >> > policy
> >> > name is the name for the setting that you will see under the category
> >> > while
> >> > the category is the name you will see under administrative templates
> >> > after
> >> > you unckeck the option for show only policies that can be fully managed
> >> > in
> >> > the filtering option of view when you have administrative templates
> >> > highlighted. --- Steve
> >> >
> >> > CLASS USER
> >> >
> >> > CATEGORY "Explorer file display options"
> >> > KEYNAME "Software\Microsoft\windows\currentversion\explorer\advanced"
> >> >
> >> > POLICY "Allow vieweing hidden files and folders via Explorer"
> >> > EXPLAIN "Allow viewing of hidden files and folders in Explorer"
> >> > VALUENAME "hidden"
> >> > VALUEON NUMERIC 1
> >> > VALUEOFF NUMERIC 2
> >> > END POLICY
> >> >
> >> > POLICY "Allow access system files/folder via Explorer"
> >> > EXPLAIN "Show system files in Explorer"
> >> > VALUENAME "Showsuperhidden"
> >> > VALUEON NUMERIC 1
> >> > VALUEOFF NUMERIC 0
> >> > END POLICY
> >> >
> >> > POLICY "Allow display file extensions via Explorer"
> >> > EXPLAIN "Show file extensions known file types in Explorer"
> >> > VALUENAME "HideFileExt"
> >> > VALUEON NUMERIC 0
> >> > VALUEOFF NUMERIC 1
> >> > END POLICY
> >> >
> >> > POLICY "Display contents of system folders via Explorer"
> >> > EXPLAIN "Allow display of contents of system folders in Explorer"
> >> > VALUENAME "WebViewBarricade"
> >> > VALUEON NUMERIC 1
> >> > VALUEOFF NUMERIC 0
> >> > END POLICY
> >> >
> >> > END CATEGORY
> >> >
> >> >
> >> > "Chamber" <Chamber@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> >> > news:90B42A9D-231F-4429-A8A6-22E64D51DE67@xxxxxxxxxxxxxxxx
> >> > > If you want the registry setting to be persistent, then you will
> >> > > need to
> >> > > create a custom template. I have done it using the following
> >> > > document
> >> > > http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/management/gp/admtgp.mspx,
> >> > > although it still doesn't make it very easy. If find other
> >> > > documentation,
> >> > > please post a link.
> >> > > --
> >> > > Chamber
> >> > >
> >> > >
> >> > > "Jonte@xxxxxxx" wrote:
> >> > >
> >> > >> If I want to change the registry with a GPO and it's not a
> >> > >> "standard"
> >> > >> policy
> >> > >> (administrative templates), then I have to make my own
> >> > >> administrative
> >> > >> template, is that right ? Or is there another way ?
> >> > >> If it's right, should I make an own administrative template for
> >> > >> every own
> >> > >> registry change ?
> >> > >>
> >> > >> Please help me out.
> >> > >>
> >> > >> Sincerely
> >> > >>
> >> > >> \\Jonas B
> >> > >>
> >> > >>
> >> > >>
> >> >
> >> >
> >> >
>
>
>
.

Relevant Pages

  • Re: Change specific registry settings with Group Policy
    ... > Hmmmmm......anyway to stop the caching of doman credentials? ... >> You would have to create a local user account for them to logon to. ... >> logon to their computer with cached domain credentials then Group Policy ...
    (microsoft.public.windows.group_policy)
  • Re: Setting "User Must Change Password at next Logon" via script:Non-AD.
    ... > they logon. ... > DOS, VBS or WMI? ... Configuring a Local User Account So It Never Expires ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.win2000.security)
  • Re: Cant logon to client
    ... created a local user account before rebooting. ... > my SBS2003 network. ... Now I can't logon to the machine to connect it to my SBS ...
    (microsoft.public.windows.server.sbs)
  • access rights on locked down W2003 server
    ... a windows 2003 enterprise server is configured for access rights (via ... gpedit.msc and only local user account) to just permit one user to logon ... logon and access to any/all drives both locally and via network but for the ...
    (microsoft.public.windows.server.general)
Quantcast