I just mean any admin template settings under User Configuration. However, it is not a terrible thing that they don't have ntuser.pol files. There's probably a perfectly reasonable explanation for it, though it eludes me right now. As long as, when you remove or set a policy setting to not configured from configured or disabled, it is getting removed from your users, then all is right with the world. From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of TAZAMAL HUSSAIN Sent: Wednesday, November 28, 2007 4:12 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Problem with GPO Setting even after set to 'Not Configured' Okay cool... if this has already been discussed, it went straight over my head... ;) So that makes sense that the domain default profile would not have it as when it was created no GP's would have been set... However the concern then is on my roaming users and any other users that I know have admin temps apply to them. They do in fact have many admin template settings applied (i mean many, as i am currently scoping reducing all these settings as i;m sure it leads to slow logons, but have not started this excercise yet) Yup... viewing the folder to show hidden files... By user specific admin template policy, do you mean Custom ADMs being applied to the users? or do you mean standard downloadable admin template settings on the User Section of a group policy being applied, if that makes sense. If you mean CUSTOM ADMs, i would even know where to start making these, so users only get settings from templates I have been able to download i.e. Office etc etc.... My understanding of what you are saying and of what I have read on your site about tattooing is that this .pol file should exist for these users.... > Date: Wed, 28 Nov 2007 16:47:03 -0800 > From: darren@xxxxxxxxxx > To: gptalk@xxxxxxxxxxxxx > Subject: [gptalk] Re: Problem with GPO Setting even after set to 'Not Configured' > > Tazamal- > The pol file is an artifact of Group Policy being applied to the user. It should not really exist in the default profile, unless, as Alan has mentioned in the past, the profile has/had GP applied to it (which is not best practice as we mentioned). In terms of existing users not having it, if they are not receiving any user-specific admin. template policy, then they would not have that file. Also note that the file is hidden (system) by default so make sure you are viewing system or hidden files when looking for it. Also, the profile copy routine--I'm not sure that it would copy the pol file up with the rest of the profile. I haven't tested that. Again the pol file is there strictly to facilitate the non-tattooing nature of Group Policy Admin Template settings so it is not a normal part of a user's profile. > > Darren > > -----Original message----- > From: TAZAMAL HUSSAIN tazamal_hussain@xxxxxxxxxxx > Date: Wed, 28 Nov 2007 16:27:47 -0500 > To: gptalk@xxxxxxxxxxxxx > Subject: [gptalk] Re: Problem with GPO Setting even after set to 'Not > Configured' > > > > > > > Okay cool, so I loaded a copy of the NTUSER.dat file from the domain defaul> t user profile. I'll test it on that first... and build some confidence, th> en load the ACTUAL domain one and make the change.... i know i;m being caut> ious... > > > > Any comments on the fact that the NTUSER.pol file doesn't exist in any of m> y user profiles folders, i am slightly concerned about this now... Now, goi> ng through the massive trail this question has had: > > > > "This will happen if when building the default profile, you copy across NTu> ser.dat but not NTUSER.POL" > > seems like this has happened... now when i built my default profile i follo> wed an article that suggested you log onto a machine with a user... configu> re everything the way you want it... logg off... log on as an admin and hit> the 'copy to' button when the required profile is selected (in propeties o> f My Computer, advanced, user profiles, settings... Thats all i did, would > this have not copied EVERYTHING including the .pol file? > > > > thanks all for your patience... nice one. > > > > Taz> Date: Wed, 28 Nov 2007 16:03:31 -0800> From: darren@xxxxxxxxxx> To: gp> talk@xxxxxxxxxxxxx> Subject: [gptalk] Re: Problem with GPO Setting even aft> er set to 'Not Configured'> > Tazamal-> Now that you have the hive file loa> ded, you can make any changes to it as you would a normal registry value. O> nce you unload that hive again, the changes are then saved to the ntuser.da> t file and subsequently created user accounts should pick up the value chan> ge.> > Darren> > -----Original message-----> From: TAZAMAL HUSSAIN tazamal_> hussain@xxxxxxxxxxx> Date: Wed, 28 Nov 2007 15:14:03 -0500> To: gptalk@free> lists.org> Subject: [gptalk] Re: Problem with GPO Setting even after set to> 'Not> Configured'> > > > > Alan/Guys,> > > > Okay... I managed to load the> Domain Default User Hive and yes, the registr> y key is in it and set....>> > > > So, is it possible somehow to edit this and then replace the NTUSER.> dat fil> e sitting in the default user profile.> > > > I;m getti > ng out of m> y depth here BUT would really like to learn the interna> l workings here. I> also dont see the .pol file in ANY of my roaming profile> users profile fo> lders.... is this bad?> > > > > > From: syspro@xxxxxxxxxxxxxxxxxx: gptalk@f> reelists.orgSubject: [gptalk] Re: > Problem with GPO Setting even after set> to 'Not Configured'Date: Wed, 28 No> v 2007 13:41:22 +1100> > > > > > > > > > > > > > > > > > > Hi Tazamal,> > > > > > To open the registry hive you mu> st:-> > > > Start regedit> > Click on Hkey_Local_Machine> > Click on file/L> oad Hive> > Then navigate to the ntuser.dat file and select it> > Give it a> new name (say aaaa) and you should be able to browse it> > When finished, > click on the root of the attached hive (say aaaa) and click > file/Unload H> ive. It gives a warning as to whether you are sure. Provided y> ou have cli> cked on the correct branch it will be OK. > > The fact that you do not see > an NTUSER.pol file sort of explains your probl> em. > It should have been cop> ied over when the NTUser.dat file was copied ove> r> > > > To get round you> current problems I would suggest a new policy with the set> ting set to DI> SABLED. This will fix your immediate problem, both for new an> d existing u> sers. You can then go through and rebuild your default profile > at your le> isure, test it and implement it. When this is done and you are co> nfident > that all (most) of your registries sitting on machines have been fi> xed, r> emove the policy all together.> > > > Alan Cuthbertson> > > > > > > > > > >> > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] O> n B> ehalf Of TAZAMAL HUSSAINSent: Wednesday, 28 November 2007 12:27 PMTo: > gptal> k@xxxxxxxxxxxxxxxxxxxx: [gptalk] Re: Problem with GPO Setting even a> fter se> t to 'Not Configured'> > > > Guys After reading all the replies I > think I need to take some time and mak> e sure this is done correctly. What> Darren suggested was what I was going t > > o do, now though i'm hestating as> i;m not sure as there might be useful stu> ff in my default profile that i> ;m not aware of. As far as I remember I only> did desktop and start menu ty> pe clean ups, but it was a while back. I cant> find the document I produced> :( Alan, some questions for you (please bear> with me if this basic stuff)> from your points i'm unsure how to carry out:> 2) How do I open the regist> ry hive?3) I dont see an NTUSER.pol file i only> see an NTUSER.dat fileI Co> pied the whole Default User profile folder from > the netlogon share to my > laptop d:\ as suggested in step 1 Have I understoo> d what you meant correc> tly? In a locked down type environment do you guys h> ave a kind of good lo> ckdown policy that you have previously documented and > have to hand when g> oing into a new environment. A kind of standa> rd procedur> e the default p> rofile should look like? In my case, users only need to fire> up Microsoft > Office, Internet Explorer, u > se certain mapped drives, pick up> printers and> run some LOB applications.. nothing else. I would be very int> erested to > see how the experienced guys deal with these kinds of things... > might be > asking for a lot. I understand this all down to choice and situati> on that> depoyment is taking place in, but any useful would be handy to know> .... > This is excellent learning for me... so thanks > > > > > > > > From: syspro> @optushome.com.auTo: gptalk@xxxxxxxxxxxxxxxxxxxx: [gptalk] Re: > Problem wi> th GPO Setting even after set to 'Not Configured'Date: Wed, 28 No> v 2007 0> 8:17:01 +1100> > > > Tazamal,> > > > While Darren is correct in what he sug> gests, I am not sure it is something > you want to rush in to. You may find> there are a lot of useful things in yo> ur default profile that you are no> t really aware of. It really depends on h> ow well documented your process > is for building the default profile.> > > > As a short term check I would d> o the following: > -> > > > > > Copy the default profile to somewhere where yo> u can play with it> > Open the registry hive and see whether the offending > key is present> > Open the NTUSER.pol file with notepad and see if the key > is present there. > (The file is a bit messy, but you should be able to rea> d it )> > > > If you find the key is present in step 2 and not present in s> tep 3, then th> at explains your problem. The quick fix is then to either r> emove the entry > from the registry hive in the default user profile or to > create a policy wi> th the entry set to DISABLED.> > > > Note: If you fix t> he default profile without creating the DISABLED policy, > you will only fi> x new users, not existing users. You may be stuck with havi> ng a policy se> tting to disable the entry until all existing users have been> fixed. Since> a user can have profiles on multiple machines, it is not "f> ixed" unt> il all copies have been fixed.> > > > So. it's all a bit messy. The mor> al of the st > ory is either follow Darre> n's advice and make sure no polic> ies are applied to your default profile,> or else ensure the NTUSER.pol is > always copied across as well.> > > > Alan Cuthbertson> > > > > > Policy Man> agement Software:-> > http://www.sysprosoft.com/index.php?ref=activedir&f> =pol_summary.shtml> > > > ADM Template Editor:-> > http://www.sysprosoft.> com/index.php?ref=activedir&f=adm_summary.shtml> > > > Policy Log Repor> ter(Free)> > http://www.sysprosoft.com/index.php?ref=activedir&f=policy> reporter.shtm> l> > > > > > > > > > > > > > > > > > > > From: gptalk-bounce> @freelists.org [mailto:gptalk-bounce@xxxxxxxxxxxxx] On B> ehalf Of Darren M> ar-EliaSent: Wednesday, 28 November 2007 6:53 AMTo: gptalk> @freelists.orgS> ubject: [gptalk] Re: Problem with GPO Setting even after set> to 'Not Confi> gured'> > > > Here's what I would do. If you have a vanilla XP image, jus> t copy the def> ault profile from c:\documents and settings\default user up> to the Netlogon > > share, over the existing one, using the System control pa> nel applet. Then > you can customize it however you want by removing shortc> uts, etc. > > > > Darren> > > > > > > > From: gptalk-bounce@xxxxxxxxxxxxx [> mailto:gptalk-bounce@xxxxxxxxxxxxx] On B> ehalf Of TAZAMAL HUSSAINSent: Tue> sday, November 27, 2007 11:34 AMTo: gptalk> @freelists.orgSubject: [gptalk]> Re: Problem with GPO Setting even after set> to 'Not Configured'> > > > Da> rren, Okay, i'm going to look into doing this tonight hopefully. Do i tak> > e the NTUSER.dat file of a new user created while the PST setting was set t> > o disabled? My confusion is around the fact that to create another Templa> te> User I will have to create another Domain User and if I do this, the re> gis> try setting for the ForcePST path will already have been set to the ne> twork> location... Doesn;t this mean this setting will then go into the tem> plate?> > > > > > > > From: darren@xxxxxxxxxxxx: gptalk@xxxxxxxxxxxxxxxxxxx> t: [ > gptalk] Re: Proble> m with GPO Setting even after set to 'Not Configure> d'Date: Tue, 27 Nov 2007> 09:53:53 -0800> > > > Well, you only need to recr> eate the ntuser.dat file as that is where the po> licy settings are held, b> ut it may just be easier to do the whole thing and> then manually remove wh> at you need to. > > > > And yes, all existing users who already have profil> es will not get affected> -only new users creating new profiles will pick> up the new defaults.> > > > Darren> > > > > > > > From: gptalk-bounce@free> lists.org [mailto:gptalk-bounce@xxxxxxxxxxxxx] On B> ehalf Of TAZAMAL HUSSA> INSent: Tuesday, November 27, 2007 9:44 AMTo: gptalk@> freelists.orgSubject> : [gptalk] Re: Problem with GPO Setting even after set > to 'Not Configured> '> > > > Darren... I get you... So i;m sure new users are getting there Def> ault prof> ile from netlogon, as a Default User profile does exist there. S> hould I tr> y and re-create this to keep troubleshooting? If I do, will > all> existing us> ers still keep the settings they have today (primarily all ru> bbish removed > from start menu and desktop etc etc)... I expect they will > keep the setting> s (which is what I want).... > > > > > > > > From: darren> @gpoguy.comTo: gptalk@xxxxxxxxxxxxxxxxxxxx: [gptalk] Re: Proble> m with GPO> Setting even after set to 'Not Configured'Date: Tue, 27 Nov 2007> 09:32:03> -0800> > > > Tazamal-> > Yes, what we're saying is that wherever your de> fault user profile is gett> ing built from, that is likely where the settin> g is stuck. There are two pl> aces this can come from. If you have a defaul> t profile up in your Netlogon > share on your domain controllers, then a ne> w user logging into a workstatio> n for the first time will have their user> profile created under %userprofil> e%\<username> on the workstation based > on that default profile. If you have> n't put a default profile under Net> logon, then the user grabs it from c:\> documents and settings\ > default user> on the workstation that they log onto. > So I suspect, depending upon your> situation, its coming from one of those > two places.> > > > Darren> > > >> > > > > > > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@freeli> sts.org] On B> ehalf Of TAZAMAL HUSSAINSent: Tuesday, November 27, 2007 9:2> 1 AMTo: gptalk@> freelists.orgSubject: [gptalk] Re: Problem with GPO Settin> g even after set > to 'Not Configured'> > > > All, I'm not sure i understan> d the question (a bit slow like that)... so I > will atempt to answer it. T> hese test users where created by right clicking > in the OU where I placed > them and creating a new account (i have also copie> d existin accounts and > the get same results). These domain users, i guess t> hen when they log int> o an xp desktop I get their profile from the domain de> fault user profile > (??) and not the local All Users profile on the desktop > (??). I created t> his a while back by creating a new user, logging in > , confi> guring desktop,> logging out, logging in as admin and copying the profile to> the domain so> mewhere... I can get the details if it helps, i tend to docum> ent everythi> ng. So are you saying that the domain default profile is where > this stuck> setting could be? Have i answered your question? Sorry have been> slow to > emails today...> > > > > > > > From: darren@xxxxxxxxxxxx: gptalk@freelists.> orgSubject: [gptalk] Re: Proble> m with GPO Setting even after set to 'Not > Configured'Date: Mon, 26 Nov 2007> 17:29:04 -0800> > > > Looking at the doc> , it sounds like this setting is stuck in the user's pr> ofile, as Alan h> ad suggested. How are your new user's profiles created? M> y guess is tha> t they are created from a template Default User Profile that > has that pat> h stuck in it.> > > > Darren> > > > > > > > From: gptalk-bounce@xxxxxxxxxxx> rg [mailto:gptalk-bounce@xxxxxxxxxxxxx] On B> ehalf Of TAZAMAL HUSSAINSent:> Monday, November 26, 2007 5:00 PMTo: gptal > k@f> reelists.orgSubject: [gptal> k] Re: Problem with GPO Setting even after set t> o 'Not Configured'> > > >> Alan, Darren, Jamie.... Your responses and guidance has been very much app> r> eciated. I've done some screen scrapes to try and eliminate any things y> ou > guys may think i might be doing wrong... I hope these help us find a s> oluti> on. I have attached a file, its not too big, hope you dont mind... T> hanks > so far on the quick responses so far. Lozz> > > > > > > > From: dar> ren@xxxxxxxxxxxx: gptalk@xxxxxxxxxxxxxxxxxxxx: [gptalk] Re: Proble> m with > GPO Setting even after set to 'Not Configured'Date: Mon, 26 Nov 2007> 16:23> :32 -0800> > > > Alan-> > Just to clarify, ntuser.pol should not exist in a> default profile. It is cr> eated on the fly (both per-user and per-compute> r) for a given user and, as > you correctly point out, contains the admin t> emplate policy settings (as we> ll as preferences by the way) for the curre> nt user. The per-user version i > s> held in the current user's profile dire> ctory. It is responsible for the > policy clean up process inasmuch as each> time Admin. Template policy is pro> cessed, this "archive" file is rea> d and any policy keys found in it are> removed before the current Admin. Te> mplate policies are re-applied. So it > is possible that this .pol file som> ehow did not get the policy in question > added to it, and thus would not r> emove it. But this seems like a strange sc> enario.> > > > Darren> > > > > > > > > > > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@freelists> .org] On B> ehalf Of Alan & MargaretSent: Monday, November 26, 2007 3:19 PM> To: gptalk@f> reelists.orgSubject: [gptalk] Re: Problem with GPO Setting ev> en after set t> o 'Not Configured'> > > > Can you try removing the registry> key manually, then reapplying the policy > and see if it comes back?> > > > > What I suspect you may have done is got your default Profile screwed up. > Th> ere are two files in > the Default profile, the NTUser.dat file which con> tain> s the registry keys that are in use, plus the NTUser.Pol file that st> ores a> ll of the non-tattooed polices that are to be removed. If these get> out of > synch, you can have the case that NTUser.dat contains a registry > key but NT> User.Pol doesn't contain the key for removal. This will happen > if when buil> ding the default profile, you copy across NTuser.dat but not > NTUSER.POL> > > > This means that new users inherit a registry which contai> ns the key but the> NTUSER.POL does not contain the key to remove it as par> t of tattoo process> ing. However, once you manually remove it, it wont com> e back. While the bes> t way to fix it for new users is to rebuild your Def> ault profile from scrat> ch, if this is the only error, you can simply remo> ve the entry from the NTU> SER.DAT. Existing users are somewhat harder to f> ix. I suspect the only way > is a batch file that removes the key on a once> of basis. Th > e trouble is tha> t you need to leave it running until all pro> files on all machines have been> fixed., > > > > Alan Cuthbertson> > > > > > > Policy Management Software:-> > http://www.sysprosoft.com/index.php?ref> =activedir&f=pol_summary.shtml> > > > ADM Template Editor:-> > http://w> ww.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml> > > > Po> licy Log Reporter(Free)> > http://www.sysprosoft.com/index.php?ref=active> dir&f=policyreporter.shtm> l> > > > > > > > -----Original Message-----Fro> m: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-> bounce@xxxxxxxxxxxxx] On Be> half Of Nelson, Jamie R Contr 72 CS/SCBAFSent: T> uesday, 27 November 2007 > 4:21 AMTo: gptalk@xxxxxxxxxxxxxxxxxxxx: [gptalk] R> e: Problem with GPO Set> ting even after set to 'Not Configured'> > > > Then, as Darren suggested, y> ou need to run a RSoP on that system/user> > and ensure you're not getting > it from somewhere else. Eliminate that> > possibility first.> > > > Also, a> re you sure GP > is processing correctly on the system? When you> > run your > RSoP, check and see if any GP related events occurred.> > > > Regards,> > J> amie Nelson> > > > -----Original Message-----> > From: gptalk-bounce@freeli> sts.org [mailto:gptalk-bounce@xxxxxxxxxxxxx]> > On Behalf Of TAZAMAL HUSSAI> N> > Sent: Monday, November 26, 2007 11:12 AM> > To: gptalk@xxxxxxxxxxxxx> > > Subject: [gptalk] Re: Problem with GPO Setting even after set to 'Not> > > Configured'> > > > Hi Jamie,> > > > Yup... gave that a go.. rebooted few ti> mes etc but still that setting is> > coming down and shown in the user regi> stry hive. Within the GPMC> > settings view of the defdompol, there is no s> ign that this setting> > (ForcePST) is now set... and the only GPO applied > to this User is> > defdompol... > > > > Thanks for you reply> > > > Loz > >> > > > Subject: [gptalk] Re: Problem with GPO Setting even after set to 'No> t> > Configured'> > > Date: Mon, 26 Nov 2007 10:58:51 -0600> > > From: Jami> e.N > elson.ctr@xxxxxxxxxxxxx> > > To: gptalk@xxxxxxxxxxxxx> > > > > > Have yo> u done a 'gpupdate /force /target:user' from the command-line?> > > Sometim> es if you forcefully reapply the policy it will correct things> > > like th> at.> > > > > > Regards,> > > Jamie Nelson> > > > > > -----Original Message-> ----> > > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@freelists> .org]> > > On Behalf Of TAZAMAL HUSSAIN> > > Sent: Sunday, November 25, 200> 7 5:36 PM> > > To: gptalk@xxxxxxxxxxxxx> > > Subject: [gptalk] Problem with> GPO Setting even after set to 'Not> > > Configured'> > > > > > Hi Guys,> >> > > > > I have also posted this to Group Policy Forums @ Microsoft. Trying> to> > > get some exposure to this problem... hoping someone can shed some>> > light.> > > I have tried to describe exactly what is going on being a de> scriptive> > as> > > possible. If I get an answer on the on the Microsoft f> orum i'll post> > it> > > over to here if anyone is interested.... > > > > > > > > I have pasted the Thread I have started already:> > > > > > > > > 2 pos> ts altogether:> > > > > > Hey Guys,> > > > > > > > Okay, although I have no> t found an answer yet, I *think* I have made> > > some > > > > progress and> am on the right lines, again if anyone has any comments> > > please > > > > > do let me know.> > > > > > > > .... after a lot of googling everything wa> s pointing to the fact> > that> > > I MUST > > > > HAVE at some point appli> ed the Outlook ADM to the def-dom-pol with> > the> > > > > > > setting for > 'default path for PST Files' pointing to my network> > > location. > > > > > After applying it I must have ripped out the ADM template from the > > > > > def-dom-pol and applied it specifically to the OU where I wanted the> > > G> PO to > > > > apply. Hence this *probably* caused GPMC to give the output o> f> > > 'display names > > > > for some setting cannot be found....'> > > > > > > > > So... in an attempt to correct this.... Within t > he def-dom-pol I> >> added> > > the > > > > Outlook ADM template back in... And set the setting> for the PST path> > > to 'not > > > > configured'.. . Rebooted an XP clien> t, logged in with a new user but> > > still > > > > outlook is pushing the > path of the PST to the network store when> > > configuring a POP3 email acc> ount.> > > > > > > > The strange thing still is even though I have configur> ed the setting> > > now to > > > > 'Not Configured' (and hence it does not > now display in the GPMC> > > settings tab > > > > for the def-dom-pol GPO a> s being set at all) AND the ONLY policy> > that> > > is > > > > applied to > Users (for new users created after this change as well)> > is> > > the > > > > > def-dom-pol ONLY, the users registry hive is still showing the> > netwo> rk> > > location path in the > > > > ForcePST registry key under > > > > HK> CU\Software\Policies\Microsoft\Office\Outlook..... which I thought> > > was> a > > > > protected registry area that does > n;t suffer from tatooing i.e...> . is> > > this > > > > tatooing? > > > > > > > > My head is kind of spinnin> g now... as i think i am getting out of my> > > depth... > > > > any steer > would be great. All i am looking to achieve is for users> > > (not within a> specific OU) default outlook PST path to point to where> > it> > > would h> ave pointed if I didn;t mess with this setting... its as if the> > > defaul> t PST location value is now the network path if I leave this> > > setting t> o 'Not Configured'> > > > > > > > lozza > > > > > > > > > > > > 'lozza' wro> te:> > > > > > > > > Hi Guys,> > > > > > > > > > I am confused by what is g> oing on here.... looking for some help:> > > > > > > > > > In AD i have an > OU with a GPO applied. This GPO, as well as other> > > user> > > > > settin> gs, sets User Configuration\Administrative Tools\Microsoft> > > Office > > > > > > Outlook 2003\Miscellaneous\PST Settings\Default location for PST> > >> files.... to > > > > > a networ > k location (I dont have any other option!).> Now my> > > understanding was > > > > > that this should apply to all user> s within the OU that is GPO is> > > linked to... > > > > > and it does, jus> t fine, was happy until today> > > > > > > > > > However....> > > > > > > >> > > When I create a new user in AD, and place him in any other OU that> > > > does not > > > > > have this GPO linked to it (and only the Default domai> n Policy),> > > this setting > > > > > still applies to the user when confi> guring outlook... it> > shouldn't,> > > should it?> > > > > > > > > > So...> I went into GPMC, clicked the OU the user sits in on the> > left> > > hand> side, > > > > > clicked 'Group Policy Inheritance' tab on the right pane a> nd see> > > that ONLY > > > > > the Default Domain Policy is being applied.> .. which it should> > be...> > > good> > > > > > > > > > So... I clicked on> the Default domain policy on the left hand side> > > pane of > > > > > GPM> C and on the right h > and side pane clicked the settings tab> > which> > > sh> ows me > > > > > all configured settings within this GPO. AND THERE IT WAS!> under> > > User > > > > > Configuration, Administrative Templates, Extra R> egistry Settings> > it> > > says:> > > > > > > > > > 'Display names for som> e settings cannot be found. You might be> > able> > > to > > > > > resolve > this issue by updating the .ADM files used by Group Policy> > > > > > > Man> agement' > > > > > > > > > > and directly under that it specifies:> > > > >> > > > > > Setting:> > > Software\Policies\Microsoft\Office\11.0\Outlook\Fo> rcePSTPath> > > > > State: \\Network File server where PSTs are stored in t> he GPO its> > > configured > > > > > for...> > > > > > > > > > So why is th> is setting, that is set in another GPO specifically> > > linked to one part> icular OU also in my Default Domain Policy? When I> > > > > open the defdom> pol to configure it I dont see the template that> > sets> > > this setting,> in fact > I dont see any of the Microsoft > > > > > Office stuff in the defd> ompol GPO as I didn't add any additional> > > administrative templates to t> he Default Domain GPO.> > > > > > > > > > Truly confused and a bit worried > that I've messed my default> > domain > > > > > policy... does anyone know > what i;m talking about?> > > > > > > > > > Lozz> > > > > > > > > __________> ______________________> > > > > > The next generation of MSN Hotmail has ar> rived - Windows Live Hotmail> > > <http://www.newhotmail.co.uk> > > > *****> ******************> > > You can unsubscribe from gptalk by sending email to> > > gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR> > > by logging into the freelists.org Web interface. Archives for the list>> > are available at //www.freelists.org/archives/gptalk/> > > > > ****> ********************> > > > > > > > ________________________________> > > >> Get free emoticon packs and customisation from Windows Live. Pimp My> > > Li> ve! <http://www.pimpmylive.co.uk> > > ***********************> > You can un> subscribe from gptalk by sending email to gptalk-request@freelist> s.org wi> th 'unsubscribe' in the Subject field OR by logging into the freeli> sts.or> g Web interface. Archives for the list are available at http://www.fr> eeli> sts.org/archives/gptalk/> > ************************> > > > > > > > > > Are> you the Quizmaster? Play BrainBattle with a friend now! > > > > > > > > > > > Do you know a place like the back of your hand? Share local knowledge wit> h > BackOfMyHand.com> > > > > > > > > > The next generation of MSN Hotmail > has arrived - Windows Live Hotmail> > > > > > > > > > Do you know a place l> ike the back of your hand? Share local knowledge with > BackOfMyHand.com> >> > > > > > > > > Do you know a place like the back of your hand? Share loca> l knowledge with > BackOfMyHand.com> > ____________________________________> _____________________________> > Celeb spotting - Play CelebM > ashup and wi> n cool prizes> > https://www.celebmashup.com> > > ***********************> > You can unsubscribe from gptalk by sending email to gptalk-request@freelist> s.org with 'unsubscribe' in the Subject field OR by logging into the freeli> sts.org Web interface. Archives for the list are available at http://www.fr> eelists.org/archives/gptalk/> ************************ > > _________________________________________________________________ > > Get free emoticon packs and customisation from Windows Live. > > http://www.pimpmylive.co.uk> > > *********************** > You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ > ************************ _____ Get closer to the jungle. I'm a Celebrity Get Me Out Of Here! <http://entertainment.uk.msn.com/tv/realitytv/im-a-celebrity/>