Re: Is it possible to make changes to a group policy through script?



"Brian Nielsen" <BrianNielsen@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:35C2EC26-DEAC-49C7-8E26-E70CD2CAE2F8@xxxxxxxxxxxxxxxx
Hi

I need to set the group policy setting "Always wait for the network at
computer startup and logon" on all Windows XP machines in the network, to
make XP apply group policies at logon time and alter group memberships on
each logon.


The policy you mention will not have the effect that you mention.
It will cause what you say only when policies are applied, which in default
settings will be when a change is detected in the applied policies.


I can't do it on the domain controller because XP be default apply group
policies asynchronously and therefore the setting will not be active when
a
user logon.


This does not follow.
Apply the setting to the client machines using a GPO if those machines
are in a domain. Once the machines have processed the new settings
those settings will thereafter be used.

The question 2-sided:
1. Is there a way to change this setting using a script on the local
machine?

Not really. One could define a template and have that applied with secedit.
Otherwise there is no scripting API available to do this.

2. If it is not possible to do it by script, what is the easiest way to
apply this change in an environment consisting of Win2k3 DC's and Windows
XP
workstations?

Use a GPO that applies to that set of workstations



.



Relevant Pages

  • Re: Windows XP remember GP when removed from domain
    ... > these policies remain in force and are locked on the local station. ... and disallowing local policy management of their values. ... Microsoft MVP (Windows Server System: ... What you're seeing on the Windows XP SP1 machines is what I'd ...
    (microsoft.public.windows.group_policy)
  • Re: Faulting application services.exe... faulting module esent.dll.. Help!
    ... Drew Gillson Wrote: ... > Windows XP machines have had this message appear in the ... pushed down group membership policies for the admin group. ...
    (microsoft.public.windowsxp.perform_maintain)
  • intermittent problems with software install via GPO
    ... On some Windows 2000 Pro machines, we get errors like these in the system ... No Domain Controller is available for domain LONGWOOD due to the following: ... There are currently no logon servers available to service the logon request. ... The machines still allow domain logons and still have access to our network ...
    (microsoft.public.win2000.security)
  • Re: Logon Script Question
    ... work in a mixed env.,, I'm ... The 98 machines seem to be the hangup on most of what I need to do (GPO, ... If you're running Windows 2003 Service Pack 1, ... that I could map a directory at logon that had many subdirectories in ...
    (microsoft.public.windows.server.setup)
  • Re: Domain Logon
    ... > I'm trying to logon to a domain using Windows XP Home. ... > The domain/workgroup is set up and lots of other machines ... > All the other machines on the network can see and access ... Windows XP Home Edition may not become a member of a Domain and will not ...
    (microsoft.public.windowsxp.security_admin)

Loading