Re: profiles and policies
- From: "Lanwench [MVP - Exchange]" <lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Sun, 25 Jun 2006 10:41:35 -0400
In news:E2D92742-915B-4302-9B93-22EE1527A963@xxxxxxxxxxxxx,
Wayne <Wayne@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
No I think you are mistaken
I run a couple of domains and consult on several more. So I set up a
test domain because I was told this was possible.
Specifically I wanted one profile for several users (eventually
making it mandatory) this way I could add things to the desktop,
change the wallpaper, and adjust things like cookies.
You didn't mention that this was going to be a shared profile - and if you
want it to be the same one, you will have to make it mandatory, I think, or
you'll run into all sorts of problems. Why not use individual profiles for
each user but force the settings you want via policy where possible? (I
don't know much about how you could handle cookies that way, but
wallpaper/desktop/etc aren't that big a deal).
I also wanted to change the default location of "My Documents" that
resided inside of the roaming profiles file, so every user had there
own folder, to a mapped drive (bat file).
Foder redirection policy (but the users can't be sharing the same mandatory
profile, of couse!)
I also hoped to change
some of the Internet Explorer options so I could add options like
proxy setting, favorites, and things like the home page (all of these
you can set with policies).
Yes.
And, most of all, I wanted to add the
security of locking things like control panel, network neighborhood,
shutdown, run command, dos prompt, task manager, MSN Instant
Messaging, and Regedit.
In the test domain I set up a profile for several users, and the only
policy that seems to run is the default domain policy.
Well - what policies did you create/expect to run? What did they do, where
did you link them? In the GPMC, did you try using the modeling wizards? Did
you try running rsop.msc on the client? gpresult from a command line?
And with the
default domain policy, only the simplest things seem to run like;
password information, and "logon script".
I wouldn't mess with the default domain policy for anything other than
password settings - create policies yourself for the other stuff.
I assumed that policies always override everything, but ..
Now if my facts are mistaken please let me know and I will retest
this.
You might also post in microsoft.public.windows.group_policy for more expert
help.
Nearly all my clients use roaming profiles and folder redirection, with most
things controlled via group policy. I don't use shared profiles (I don't see
the point), so I don't know exactly what you're experiencing, but I suggest
you set up
Wayne
MCSE, MCP, Exchange, Apple, Lexmark, Xerox, etc, etc.
"Lanwench [MVP - Exchange]" wrote:
In news:B24E6A7A-2654-478A-9840-DB2137108533@xxxxxxxxxxxxx,
Wayne <Wayne@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
Can you have roaming profiles, and run policies at the same time?
Windows 2003 domain.
Roaming profiles and group policies? Sure. What is it you want them
to do?
.
- References:
- Re: profiles and policies
- From: Lanwench [MVP - Exchange]
- Re: profiles and policies
- Prev by Date: Re: Windows AD integrated DHCP server
- Next by Date: Re: Time sync
- Previous by thread: Re: profiles and policies
- Next by thread: Gigabit Ethernet and Flow Control
- Index(es):
Relevant Pages
|
|
