so this station can still communicate with others that are not using ipsec ? can you send me the gpresult from gpmc ?ipsec can clearly prevent this unencrypted communication from my understanding
Regards, Mathieu CHATEAU http://lordoftheping.blogspot.com----- Original Message ----- From: "Ray Lewis" <razor@xxxxxxxxxxxxxxxxxxxxxxxx>
To: <gptalk@xxxxxxxxxxxxx> Sent: Friday, January 26, 2007 10:44 PM Subject: [gptalk] Re: Disabling Computer Accounts
Hello Yes to both Cheers Ray -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Mathieu CHATEAU Sent: 26 January 2007 21:35 To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Disabling Computer Accounts did you replicate between AD and issue a gpupdate on the station ? is the windows ipsec service started ? Regards, Mathieu CHATEAU http://lordoftheping.blogspot.com----- Original Message ----- From: "Ray Lewis" <razor@xxxxxxxxxxxxxxxxxxxxxxxx>To: <gptalk@xxxxxxxxxxxxx> Sent: Friday, January 26, 2007 10:35 PM Subject: [gptalk] Re: Disabling Computer AccountsThanks Guys.. Mathieu, I tried this but unfortunately, it had no effect. I cant think were Im going wrong -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Mathieu CHATEAU Sent: 26 January 2007 18:36 To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Disabling Computer Accounts just to be clear, you will find an example of the GPO to make as screenshot. The goal is to allow only encrypted trafic and nothing else. Regards, Mathieu CHATEAU http://lordoftheping.blogspot.com----- Original Message ----- From: <neil@xxxxxxxxxxxxxxxx>To: <gptalk@xxxxxxxxxxxxx> Sent: Thursday, January 25, 2007 5:03 PM Subject: [gptalk] Disabling Computer AccountsHi all, Does anyone have any ideas on how best to achieve the following. I need to make a computer that is intially built into the domain - virtually unusable until it is placed in the correct OU.I had thought of applying a very restrictive GPO to the default computersOU which made it unusable but not quite sure which settings to apply and if there are any issues with doing this. It is bascially to stop people bypassing build procedures and policies and not putting the computer into the correct OU. Thanks for any thoughts :) Neil *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR bylogging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ *********************************************** You can unsubscribe from gptalk by sending email togptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR bylogging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ *********************************************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************ ***********************You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/************************
*********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************