Re: group policys

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: JJ (3Pack_at_msn.com)
Date: 05/20/04 

Date: Wed, 19 May 2004 21:09:26 -0700

Thanks for the info.

I followed your directions below. I created my own policy. I assume the
items listed under my new policy
(JJ Policy) are links. There is one item I want to use but it listed like
this.(Microsoft Network Server: Amount of idle time before suspend session)
I don't want to change the server I want to incorperate this for
workstations. If I change this will it change the server. This is already
set up by default for 15 minutes in the default domain policy.

Thanks for your help

JJ

"Roger Crawford" <rcrawford@nospam.scci.com> wrote in message
news:uBvFN$ePEHA.3348@TK2MSFTNGP09.phx.gbl...
> JJ just be very very aware when you make any changes to the default domain
> policy or domain controller policy that it affects all workstatuions,
users
> and servers and administrators in the domain. You don't want to apply a
deny
> login locally on the server to the administrator and then they can't login
> to the server locally
>
> What I like to do is if I am going to be doing some changes to either the
> workstations or users to create a OU or with SBS 2003 some of those are
> already created for you. If you go open the Management console you will
see
> to the bottom Advanced Management and if you drill down under Active
> Directory Users and Computers and then domain.local or whatever it is and
> then My Business and then Computers and then SBS Computers and in here you
> will see you domain computers.and also one for your servers. If you right
> click on Computers and go to Properties and then Group Policy you can open
> the editor. Or go to Adminstrative Tools and then Group Policy management
>
> It does take some time for the settings to filter down and if you go to
the
> run line on the server and type in gpupdate it will refresh your domain
> policies. I would create OU's for the users or computers themseleves or
use
> the ones already built for you in the GPMC to apply settings to on a
> workstation or user you just have to create and link the Policy to go with
> some of those. But just be very aware of the changes you might make so you
> don't lock out your administrator or apply some setings to the server you
> don't want.
>
> Roger Crawford
> HTS
>
> "JJ" <3Pack@msn.com> wrote in message
> news:%239jYDgdPEHA.2716@tk2msftngp13.phx.gbl...
> > I have tried to change a group policy setting but it appears it has not
> > taken effect.
> >
> > I went to the Group Policy Management Counsel. I then went to the
"default
> > Domain Policy of JJ.Local". I changed some security settings, then I
> > restarted the workststion and nothing has changed. Have I forgot a
setting
> > to make this setting take effect.
> >
> > Thanks
> >
> > JJ
> >
> >
>
>

Relevant Pages

  • Re: group policys
    ... are you wanting the workstations to lock the session if the user walks away? ... I created my own policy. ... > this.(Microsoft Network Server: Amount of idle time before suspend ... >> then My Business and then Computers and then SBS Computers and in here ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... What bothers me is that if this policy, ... into from other computers. ... When I view the event logs through server management the ... All event logs should be set to a decent size (about 20MB at ...
    (microsoft.public.windows.server.sbs)
  • Re: Assign Domain Security Policy/Manage remote computer
    ... creation and dns srv records. ... as it's primary dns server. ... As far as ipsec policy. ... assign whatever you require to the rest of the domain computers - usually ...
    (microsoft.public.win2000.security)
  • Re: How to allow users to create groups and shares
    ... Add the user/group to the Computer configuration, windows settings, security settings, Local policies, "Allow logon locally" in the Default domain controllers policy and on a existing or new created policy for the member servers. ... Filtering: Not Applied ... check with GPMC on the server or from a client the policy settings. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Require connecting systems to be a Domain Computers
    ... something in which I include the group Domain Computers. ... >kerberos computer authentication for the ipsec SA then the computer must be ... In such case the server must not be a domain controller, ... >ipsec require policy will need to exempt all domain controllers with a rule ...
    (microsoft.public.security)