Re: Is it possible to make changes to a group policy through script

For that setting I would look to see if NTrights.exe from the resource kit
could handle your need. Otherwise, yes, one can have a single settings in
a template and apply it. I just define a temp GPO, import the template, and
use GPMC to see report of settings when I want to verify what is in a
template
(easier than all the clicking through the template to verify).

However, in your case, I would not advise using a template etc. as what one
states there is the fully and complete list of groups/accounts that have
that right.
You cannot make assumptions about what differences may exist in different
machines. Hence, see if NTright.exe can do it. Also, user rights are one
of the
very few policy settings that are accessible from custom code.


"Brian Nielsen" <BrianNielsen@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F2F8F0C2-90C4-4083-A8DB-276AC6EB5C18@xxxxxxxxxxxxxxxx
Hi Roger

Thanx for the answer.

The primary reason for using the setting is that some of the users on the
network must have special rights (the rights are given through group
membership).
When these users login, they select a 'profile' to work as and then
re-logon
to have the proper rights.

In this case group membership must be updated and take effect at that next
logon. And this only happens on Windows 2000 WS or if this GPO setting is
enabled on the client in Windows XP.

If there are easier an easier way to make this happen, I would like to
know...

I'm not completely sure about templates.
Can I make a template that only contains this single change (and be sure
that there not other machine specific stuff in the template).
And then apply it to the client by a script?
(it is to be used as part of an installation MSI file)

/Brian


"Roger Abell [MVP]" wrote:

"Brian Nielsen" <BrianNielsen@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:35C2EC26-DEAC-49C7-8E26-E70CD2CAE2F8@xxxxxxxxxxxxxxxx
Hi

I need to set the group policy setting "Always wait for the network at
computer startup and logon" on all Windows XP machines in the network,
to
make XP apply group policies at logon time and alter group memberships
on
each logon.


The policy you mention will not have the effect that you mention.
It will cause what you say only when policies are applied, which in
default
settings will be when a change is detected in the applied policies.


I can't do it on the domain controller because XP be default apply
group
policies asynchronously and therefore the setting will not be active
when
a
user logon.


This does not follow.
Apply the setting to the client machines using a GPO if those machines
are in a domain. Once the machines have processed the new settings
those settings will thereafter be used.

The question 2-sided:
1. Is there a way to change this setting using a script on the local
machine?

Not really. One could define a template and have that applied with
secedit.
Otherwise there is no scripting API available to do this.

2. If it is not possible to do it by script, what is the easiest way to
apply this change in an environment consisting of Win2k3 DC's and
Windows
XP
workstations?

Use a GPO that applies to that set of workstations






.

Relevant Pages

  • Re: Security template crashed apps
    ... I decided I'm going to setup a dummy machine and build the template from ... thinking that in the File System or Registry sections, permissions got ... on the machines, I didn't see anything that could be a cause. ... I'll take a look at the registry key ...
    (microsoft.public.win2000.security)
  • Re: Is it possible to make changes to a group policy through script
    ... Otherwise, yes, one can have a single settings in ... I just define a temp GPO, import the template, ... computer startup and logon" on all Windows XP machines in the network, ...
    (microsoft.public.windows.group_policy)
  • Access 97: User permissons problem?
    ... I'm using the code at the end of this post to populate a Microsoft Word ... template with data from fields in an Access 97 database. ... I have a mixture of NT4 Workstation and XP Pro client machines. ... relevant template is loaded, but no data is pulled across from Access. ...
    (microsoft.public.access.security)
  • Re: Problems using Crtl F4 to close documents in Word 2003
    ... remaing the normal template to oldnormal.dot. ... Word MVP web site http://word.mvps.org ... These 5 machines all came pre-installed with a trial for office 2007, ...
    (microsoft.public.word.docmanagement)
  • Re: header isnt visible when template is opened.
    ... > The template does have "show white space between pages" checked. ... >> Microsoft MVP ... >> Fairhope, Alabama USA ... >>> The problem seems to be specific to a few machines at this office. ...
    (microsoft.public.word.docmanagement)
Loading