Re: GroupPolicyMinTransferRate and Current User

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Howdy Corin!

Toothman wrote:
To elaborate further; I can apply GPs in the local domain but the
remote site is not getting GPs applied unless I manually add the
"GroupPolicyMinTransferRate" key to the the registry. Our routers are
blocking the second icmp request when authenticating with the domain
controller so the machine is aborting GP processing. I also thought of
the PingBufferSize solution but our routers are set to only allow
packets under 108 bytes where the minimum size for PingBufferSize is
500 bytes. I was hoping someone had got around this issue here in
someway where they had the situation of more than one user at the
remote site and needed to add this registry key to various user
profiles.

You're sure about that? Even if it is a slow link, regkeys and policies from UserConf/Adm Templ/... and CompConf/Adm Templ/... will always be processed, see:
http://support.microsoft.com/kb/227369/en-us
Maybe something else is broken that might prevent the users and machines from getting the policies. Have you checked the eventlogs?

I guess I could also post in another group just trying to find a way
for a user to modify registry entries in
"HKEY_CURRENT_USER\Software\Policies" as this the real cause of my
problems; it appears that only a user who is logged in and has admin
rights can modify these keys?

No. Logon scripts run in the context of the user. If your users aren't local admins (what's a good policy by the way) they will not be able to access this regkey to alter it. And so is the logon script.

You could try to write yourself a custom ADM template and change the regkey - but if the policies won't get applied, chances are that custom adm templates won't either...

cheers,

Florian
--
Nachwuschsadmin aus dem Süddeutschen/Germany.
eMail: Vorname [bei] frickelsoft [Punkt] net.
.



Relevant Pages

  • Re: Local policy, IE and SP2...
    ... I must mention here that I rarely use GPEdit and almost always I change the Explorer or System policies through registry. ... The same I did for those tests I mentioned for SP2. ... this is true - those policies will not allow you to lock user accounts from launching applications from hidden drives. ...
    (microsoft.public.windowsxp.embedded)
  • RE: Moving from NT4 policy to Group Policy
    ... The mixed environment of Group policies and System policies ... policies which are permanently applied in the registry and Group Policy ... which is all documented by MS for non GPO ...
    (microsoft.public.windows.server.active_directory)
  • Re: What program is used to write events to the event log??????
    ... I believe that the event logging functionality is implemented as ... > issue....whenever there is an exe being started it normally writes this ... a few days ago I posted a question about wether these policies could ... > search function it can only be found in the registry at the three above ...
    (microsoft.public.windowsxp.security_admin)
  • Re: disable double clicking attachments
    ... separate of the e-mail is the second prompt. ... You can't do what you want in Outlook. ... They could edit the registry to add filetypes to the Level1Remove ... Using Exchange would have its policies override what the user ...
    (microsoft.public.outlook.general)
  • Re: Group Policy question
    ... System policies is an old way that was used in the pre Windows 2000 days. ... I do know to not mess with the registry ... help pages in Group Policy and read something about System Policy and how ... able to use it to some degree to lock down the limited account I created I ...
    (microsoft.public.windowsxp.security_admin)