[gptalk] Re: problem undoing policies set in office xp adm

  • From: "Alan & Margaret" <syspro@xxxxxxxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Tue, 27 May 2008 18:16:24 +1000

Hi Daniel,

 

The behavior of Policies when you disable them depends on which registry key
and what the ADM template says to do.

 

Firstly, if the key is of the form

            Machine\Software\Policies\...,    

            User\Software\Policies\...,    

            Machine\ Software\Microsoft\Windows\CurrentVersion\Policies\...,


            User\ Software\Microsoft\Windows\CurrentVersion\Policies\...,   

then this is treated as a non tattooed policy. That is GPO processing will
remove the registry value if it is no longer configured in any policy for
that user or machine. Therefore setting the policy to "Not Configured" will
have the key removed and the application will fall back to using the
corresponding non-policy key, i.e the user's original setting. Setting it to
"Disabled" will take whatever action the ADM Template says to take. This may
or may not be to remove the registry entry. 

 

If the key is not of this form then setting the policy to "Not Configured"
will just leave it in the state it was set previously. Setting it to
"Disabled" will take whatever action the ADM Template says to take. This may
or may not be to remove the registry entry.

 

I am assuming that you are referring to the 'Shared paths/ User templates
path " entry. This uses the
Software\Policies\Microsoft\Office\10.0\Common\General\ UserTemplates  which
is of the first type, so setting them to "Not configured" will get them
removed. Note: this will then drop back to using the user's setting that was
in place prior to applying the policy which may or may not be the
applications default setting. Since they are TEXT entries so setting them to
"Disabled" should also remove them which would have the same effect

 

Can you confirm that this is the policy you are referring to and whether the
UserTemplates  entry under \Policies\Microsoft\Office\10.0\Common\General
still remains in the Users registry? 

 

Alan Cuthbertson

 

 

 Policy Management Software:-

http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml>
&f=pol_summary.shtml

 

ADM Template Editor:-

http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml>
&f=adm_summary.shtml

 

Policy Log Reporter(Free)

http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml>
&f=policyreporter.shtml

 

 

  

 

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of rpo
Sent: Tuesday, 27 May 2008 4:49 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] problem undoing policies set in office xp adm

 

hi all,

 

first mesage to the list, and may i say good to see a mailing list

dedicated to group policy discussion. i'm experiencing an issue at the

moment i thought i'd put out there and hopefully get a resolution for.

 

we have various policies set in an office xp adm to redirect certain

folders like user template folders, startup folders, etc. to certain

network locations, specifically areas in the user's home folder. what

i'm doing is trying to disable these redirections so the defaults are

used.

 

what i've done is a made a copy of the gpo and modified the settings i

want to disable. what i have done is select disable rather than not

configured. i have then linked my new gpo to the ou, and unlinked the

existing one.

 

what i'm finding is that settings seem to be tattooed and aren't

reverting to the application's default locations. my understanding is

that disabling a policy should revert it to the default setting, in

contrast to setting it as not configured, in which case it retains the

setting, but it is no longer enforced and can be changed.

 

any ideas where i've gone wrong guys?

 

thanks in advance,

 

daniel.

***********************

You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/

************************

Other related posts: