RE: GP settings questions?



Hello Gary,

Thank you for posting in the SBS newsgroup.

According to your description, I understand that you have some questions
with the Group Policy on the SBS Server. If I have misunderstood your
concern, please don't hesitate to let me know.

1. Question: Under MyBusiness-Computers, I have SBSComputers and
SBSServer. How do I tie those folders to only computers or the sbs server
or if I make a notebook folder to just notebooks?

Answer: You can right-click the SBSServers or SBSComputers container, and
select 'Link an Existing GPO' or 'Create and Link a GPO Here' to link a GPO
only the SBSComputers or the SBSServers. In addition, you can create a new
Organizational Unit (OU) - Notebook under SBSComputers OU on the ADU&C, and
move the notebooks into the Notebook OU, then link the appropriate GPO to
the Notebook OU.

2. As you mentioned, you tried making a GP link in the SBS Server and it
did not take affect. Please refer to the below document to use GPResult.exe
to determine Resultant Set of Policy:

Determine Resultant Set of Policy with GPResult.exe
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serve
rHelp/10997a3d-98f4-4fc2-bc82-f85beb6fd13e.mspx

Additionally, you can locate the problematic GPO OU, and change the Link
Order of the Linked Group Policy Objects, then click Settings tab, check
the GP result, and then check if the issue can be reproduced.

3. Question: Also is there a way I can push/add bat files to all user
desktops via GP?

Answer: Can I assume you would like to let all user automatically run the
*.bat files when they logon their workstations? If so, we may perform the
below steps to
add the bat files:

I. Create Group Policy Object for the *.bat files

1. Open 'Group Policy Management' console in 'Administrative Tools'.
2. In the console, navigate to 'Forest'\'Domains'\<Domain Name>\'Group
Policy Objects'.
3. Right-click it and then click 'New'.
4. Right-click this newly created group policy object, click 'Edit'.
5. In the group policy editor console, navigate to 'User
Configuration'\'Windows Settings'\'Scripts (Logon/Logoff)'.
6. In the right panel, double click 'Logon'.
7. In the properties window, click 'Add' button.
8. Find the appropriate bat files and add it into the logon script list.
9. Click 'OK' to close the dialog box.

II. Link the Group Policy Object to the domain level

1. In the 'Group Policy Management' console, Right-click the domain and
choose 'Link an existing GPO'.
2. In the list, please choose the newly created group policy object
3. Click OK

To get additional detailed information, you may refer to the following KB
article:

250842 Troubleshooting Group Policy application problems
http://support.microsoft.com/?id=250842

325342 HOW TO: Use Group Policy to Configure Advanced Settings for Internet
http://support.microsoft.com/?id=325342

I am appreciated your time and cooperation. If anything is unclear, please
feel free to let me know. I am looking forward to hearing from you.

Best regards,

Nathan Liu (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>From: "Gary V." <salarmy@xxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: GP settings questions?
>Date: 18 Aug 2005 12:15:37 -0700
>Organization: http://groups.google.com
>Lines: 14
>Message-ID: <1124392537.340000.295790@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>NNTP-Posting-Host: 208.53.87.254
>Mime-Version: 1.0
>Content-Type: text/plain; charset="iso-8859-1"
>X-Trace: posting.google.com 1124392543 29340 127.0.0.1 (18 Aug 2005
19:15:43 GMT)
>X-Complaints-To: groups-abuse@xxxxxxxxxx
>NNTP-Posting-Date: Thu, 18 Aug 2005 19:15:43 +0000 (UTC)
>User-Agent: G2/0.2
>Complaints-To: groups-abuse@xxxxxxxxxx
>Injection-Info: g49g2000cwa.googlegroups.com; posting-host=208.53.87.254;
> posting-account=FbCvfA0AAACjuAQLB1cdUV3g5WbrHvTY
>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!nntp.giganews.com!news.glorb.com!postnew
s.google.com!g49g2000cwa.googlegroups.com!not-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:145634
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>I have a few GP questions. Under MyBus-Computers I have SBSComputers
>and SBSServer. How do I tie those folders to only computers or the sbs
>server or if I make a notebook folder to just notebooks? I tried making
>a gp link in the sbs server folder and it did not take affect, I had to
>move it to domain controller (it was my wsus gp for the sbs server).
>Also some of the settings are not taking affect and others are. For
>example, in internet explorer, I want the title bar to say provided by
>companyname. I made the gp change and no update but the other IE
>security settings I changed have taken affect. Also is there a way I
>can push/add bat files to all user desktops via GP?
>
>Thanks for your help and input
>Gary V.
>
>

.