Re: Group Policy question

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Thanks Mal

That helps!

Have a great weekend

Jeff


On Feb 25, 12:31 am, "Mal Osborne" <m...@xxxxxxxxxxxxx> wrote:
There is no reason why you cannot edit any GPO you have rights to from an XP
PC. (If you need to edit firewall exceptions on a SBS-2000 site, you MUST do
from an XP box). How this affects settings on other PCs is dependant on the
GPO you are editing. if you just run GPEDIT.MSC, you will be editing the GPO
on the local machine, it will have no effect on any other PCs.

To edit domain GPOs, do the following:
1. Log into the XP box as a domain administrator.
2. Run the MMC (type MMC at a prompt)
3. File, add/remove snapin.
4. Select Group policy object editor, click "Add".
5. Browse to target to GPO you want to edit.
6. Click "OK, and "Finish"

This also works from another server, or a Vista box.

Mal Osborne
MCSE Mensa

"Jeff Teel" <jdteel@RMoveThis sugardog.com> wrote in messagenews:O9RSjFJWHHA.192@xxxxxxxxxxxxxxxxxxxxxxx

Same here! Could I ask why you are attempting this? The GPO's that apply
to the workstations reside on the server not the workstation. The results
of the policies (such as registry settings for instance) are on the
workstation but being able to edit a GPO on the workstation that is a
domain GPO is not possible.

"jawdoc" <drbro...@xxxxxxxxx> wrote in message
news:1172367947.151902.80980@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Maybe I should have added that I logged in as the domain Administrator
on the workstation.

On Feb 24, 6:48 pm, "Jeff Teel" <jdteel@RMoveThis sugardog.com> wrote:
You should not be able to edit domain Group Policy Objects from the
Windows
XP workstation. The only way to change (Domain) GPO's would be from the
server. I tried opening gpedit.msc from one of my workstations and I
received an "Access Denied" error stating "You do not have permission
to
perform this operation".

Jeff

"jawdoc" <drbro...@xxxxxxxxx> wrote in message

news:1172361798.664861.267660@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

I was hoping someone could help me understand something.
If I make a change in the group policy (gpedit.msc) on a windows xp
pro machine that IS logged onto a domain. Will this make a change to
this machine only or does is make a change to that user no matter
which machine he/she logs onto?
Thanks in advance!


.

Relevant Pages

  • Re: Unable to save GPO edits in Windows 2003 Small Bussiness Serve
    ... I am able to create GPO's on my test server and edit them as ... to delete the GPO at the very least. ... Group Policy Management "The server is unwilling to process the request" ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to save GPO edits in Windows 2003 Small Bussiness Serve
    ... The test server is the same OS as the server I am having issues with. ... I should be able to delete the GPO at the very least. ... I have tried to edit the new policy to push out workstation settings with no avail. ... Administrative Templates "The Group Policy snapin was unable to save your changes due to the following error: Logon failure: unknown username or bad password." ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO is ignored after 2 weeks
    ... Ipconfig/all from server and workstation? ... I have to stop some users on an SBS R2 accessing the Internet so I ... I am not sure why your GPO stopped, but here is a little trick: ...
    (microsoft.public.windows.server.sbs)
  • GPO doesnt apply to workstations, please help
    ... I have a small domain with one Win2k3 server ... Then, I created a GPO ... logon in a workstation ... the workstation still uses its local policy instead of the group policy I ...
    (microsoft.public.win2000.active_directory)
  • Re: GPO doesnt apply to workstations, please help
    ... Then, I created a GPO ... > terminal server client). ... > logon in a workstation ... > the workstation still uses its local policy instead of the group policy I ...
    (microsoft.public.win2000.active_directory)