Re: SFS / Local / Group policy

"toal5" <toal5@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CBF6ADB6-500A-482F-A5C6-2E2AC32BB5CA@xxxxxxxxxxxxxxxx
OK..... Sorted it

File and Print sharing not enabled on certain machines. No need


Glad you got it fixed -- I was traveling for Thanksgiving
with family a lot last week and so must apologize for
answering slowly and intermittently.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]



"toal5" wrote:

Cheers again for the reply Herb

Right.....
I have already ran the gpresult from the command line and no help what so
ever, but I had better give you the full story...

I am actually running Novell Edirectory and the way it pushes out group
policy is through the use of setting up the local policy and then this
gets
pushed out through Zenworks.
I have looked at all policies being pushed down and none push 'Guest
Only'... so anyway the way I have got around this is to create a new
policy
forcing 'Classic Logon' and apply this to all workstations and make this
a
persistent setting.....and yes it has worked you'll be glad to know (I
know
this is just a workaround but hey)

Now that is fixed I have another problem, I seem to be able to connect to
certain workstations (ones which are on my browser list, in my workgroup
(we
are all in one big workgroup in Novell)) if the workstation is not in the
browser list it give me a message which says

"Windos cannot find \\xx.xx.xx.xx\c$. Check the spelling and try again,
or
try searching for the item by clicking on the start button and then
clicking
search"

This is the same if I try and connect to a remote workstation (not on our
subnet)

whats going on?????





"Herb Martin" wrote:

"toal5" <toal5@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C0400F1D-328D-45A4-90DE-B078C6FA5BEB@xxxxxxxxxxxxxxxx
Thanks for the replies guys,

OK well...........

How come my setting of Logon as classic (not Guest only) which is
pushed
out
in a group policy doesn't overwrite my local policy?????

It does (in practically all cases*), so we must instead
ask:

"Is your GPO being applied?
"Why not?"
Or "What other GPO is overriding that one?"

* There is a registry setting for allowing the Local
GPO to take precedence over those for the domain
but I don't generally publicize it since it is a very
poor practice to enable it in all but the strangest cases.
If you don't know about this (or the order) then odds
are extremely low that this could be your issue.

I have a couple of policies which are pushed out to all workstations
one
changes some firewall settings and one changes some IE proxy
settings. I
have
double checked that the Logon as classic is set in both of these
policies.

Have you checked to see that these policies are being
APPLIED?

GPResult to see which policies are being applied (a quick
and simple test.)

GPResult /Z
(zuper verbose, or /v verbose)
Will show you the actual detail.

If you prefer a GUI then run RSoP from the AD Users and
Computers of Win2003 DC tools, but I actually like the
text version run FROM the machines with GPResult better
in most cases.

Any ideas??????

Determine if the GPO is being applied and if the
settings there are being overridden by another
DC supplied GPO.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]


Cheers

"Herb Martin" wrote:

"toal5" <toal5@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:DA0724C4-7C0A-40D8-ADB9-AE9FACB5803A@xxxxxxxxxxxxxxxx
I have had some trouble recently with Simple File Sharing, every
time I
have
tried to disable it, it kept turning back on.
I have tried turning of 'Guest only' and use 'Classic Login' by
pushing
the
setting out through group policy
I have eventually found out that the setting (Guest only) was
enabled
in
the
LOCAL Security Policy.

My question is (I know Local Policy overwrites Group Policy)

That is incorrect.

Policies applied from the Domain (Site, Domain, OU) override
Local policy (in that order.)

how can I
change the local security policy without having to go round to all
the
machines individually?

Set it on the domain, e.g., in a GPO linked to the Domain
would affect all machines and override local settings.

Is there a reg key I can push out?




--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

Thanks









.