[gptalk] Re: Group Policy sticks after domain migration

  • From: "Alan & Margaret" <syspro@xxxxxxxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Wed, 19 Nov 2008 18:09:07 +1100

Hi Charlie,

Can you confirm that neither of the user policies are applying to the admins
that are being locked down? If so check the contents of the Default Profile.
If you copy the NTUSER.pol file then open it with notepad, does it contain
entries for the non-tattooed policies? It is a little tricky to read, since
it displays 2 characters for each actual character, so just read every
second character....

Alan Cuthbertson

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Kaiser, Charlie
Sent: Wednesday, 19 November 2008 1:56 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Group Policy sticks after domain migration

To clarify; they are the same machines, just moved out of one domain
into another, but I mistakenly put computer config instead of user
config. It's all the lockdown items like no run, no shutdown, that kind
of stuff. Actually, all that's on the desktop is one app and log off...

Thanks! 


**********************
Charlie Kaiser
W2K3 MCSA/MCSE/Security
Systems Engineer
925 274 3183 desk
925 890 3517 cell
********************** 
-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Tuesday, November 18, 2008 6:55 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Group Policy sticks after domain migration

Actually, I was thinking of both ADM and non-ADM policies. What is not
clear in this original question was whether the machines being moved
into domain2 are the same TSs that are mentioned earlier. Also, what is
not clear is what policies are sticking around--and whether they are
truly per-user or per-computer, since Charlie mentions Computer Config,
below. Probably need some more info here.

Darren
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/
************************

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: