re: Login Hours
Thursday, February 14, 2002 at 2:51 pm
Windows 2000 Annoyances Discussion Forum
Posted by Matt
(7 messages posted)
Ok, Did some experimenting.... First of all, I decided to delete the OU..... Now
I am focusing only on editing the "Default Domain Policy"... In the AD structure
I have all the stations in the "Computers" folder, the server itself in the "Domain
Contollers" folder, and the users in the "Users" folder.
Now... I am going to the domain "mattmontalto" and right clicking and going to properties,
- GP - and then "edit" (editing the default domain policy).
From there i am going to "user config" and in the folder: Administrative Templates\Start
Menu & Taskbar, I am enabling something that would be a noticable command.... - such
as hiding the "Run" command from the start menu.
Now... I manually refesh my user policy and log out & in the stations and the server....
However, for some reason, the "run" command is only hidden on the Server's start
menu and NOT on any of the staions.--- So I left it for a couple hours and the logging
in on one of the stations again, and still no change.
Pretty stumped at this point .... for some reason, the effects of the settings I
change are only appearing locally..... Is it possible that I need to be running some
type of login script for my users in order for their machines to be affected by the
changes I make?..
Once again.... Thanks for listening .... I really appreciate it.....
On Wednesday, February 13, 2002 at 2:03 pm, Curt R wrote:
>Right, you can't remove the default Domain policy. Just make sure you've edited
>it to remove any changes you made regarding these log off settings. My big disadvantage
>in trying to help you troubleshoot this is not having AD installed on my server
so
>I'm trying to do this from memory. Once you've reset all policies edit one on
the
>OU you wish to apply it to. I thought the "automatically log off user..." setting
>was in both computer and user configuration but I guess I was wrong. Since it only
>applies to computers I'm not sure it'll work how you want it to. I'm going to be
>able to lab this out tomorrow so I'll quickly check once I'm working on an AD integrated
>DC and I'll get back to you with my results then. Before an applied policy will
>take effect you have to allow time for replication to happen. The secedit /refreshpolicy
>command only works locally, and won't affect other PC's or users until replication
>has taken place between your DC's. Replication can take up to about 15 minutes
by
>default but can be forced in AD Sites. Since this is a computer configuration setting
>the correct secedit command is as follows: secedit /refreshpolicy machine_policy.
>
>
>On Wednesday, February 13, 2002 at 11:11 am, Matt wrote:
>OK.... I removed the policy: "Matts OU Group Policy", I cant remove the default
>somain
>policy... and the "automatically log offf...." setting is only in the computer configuration
>setting.... doesnt seem to be in the user config setting.... Did some experimenting
>though, and it seems that whatever setting I affect (in user or computer settings),
>the effect seems to only take place locally... on the server itself.... i.e. "Hide
>All Desktop Icons" settings will hide them all on the server only.... I notice that
>when I go to edit group policy for matts ou group policy, OR for the default domain
>policy, that at the top of the tree (where it says the name of the policy being
>edited),
>its says.... in my case...: "Matts OU Group Policy [SERVER] Policy" or "Default
>Domain Policy [SERVER] Policy"... ("SERVER" is the name designated for my w2k server)
>so it seems that I must need to edit the policy for the other stations? Kind of
>confused on how to do that though.... been through computer mgmt for them.... cant
>seem to edit their settings there..... Any Ideas?... Thanks.
- Written in response to:
- re: Login Hours (Curt R: Wednesday, February 13, 2002 at 2:03 pm)
Responses to this message:
|
|
All messages in this thread [show all]
 | | | | | | | | | |  | re: Login Hours (Matt: Thu, Feb 14, 2002, 2:51 pm) |
| |
| |
Return to the Windows 2000 Discussion Forum
|
|
