[win2kforum] Order of priority between Polices and profiles

From: "Robert Davis" <sniper_lt@xxxxxxxxxxx>
To: win2kforum@xxxxxxxxxxxxx, Redicks@xxxxxxxxxxxxx, Don@xxxxxxxxxxx
Date: Fri, 27 Apr 2001 20:15:08 -0000

I run a network with a win2k server connected to a 100Base-T network with 25 
win98 clients. I have set a the registry of all the clients to validate user 
logons to the network with the server.

I have been trying to set up group policies for my users. I followed the 
instructions at www.elkanter.net/security/security.htm. This is and 
excellent tutorial on using system policy editor written by Stacey 
Anderson-Redick.

She start by saying that you need to edit the registry of each machine to 
allow remote updates.

I did that to 3 test machines.

Then enable user profiles on each machines.

I did that.

Then she suggest creating and test user with only one setting that is to set 
the windows wallpaper to sandstone.bmp. Then save that to a config.pol file 
and copy it to the netlogon share of the server. This is just to test that 
the config.pol file is being copied to the registry of the client. Then log 
on as that test user to see if the wallpaper changed to sandstone.bmp

I did that.

The problem is that when I logged on as that test user. The wallpaper 
changed briefly to sandstone. then changed back to the default light green 
wall paper that I have every machine set to.

I thought that maybe that user policy was being overridden but something 
else.

At www.globetrotting.com/winnt.pol.html  its says the the "pecking order" 
for Systems Policies is.
" 1. Machine, Machine Policies can over wrote the User/Group setting"
" 2. User, User Policies completely bypass Group policies( no precedence, 
just replacement)"
" 3. Group..."
" 4. All of these can overide Profile Settings."

Can someone tell me if this order is true?

If this is true might it be that something in the local machine registry is 
overiding the test users' policy and that is why the wallpaper is changing 
back to light green default?

I checked the local machine setting with systems policy editor and there is 
no setting (check mark) for wall paper in the local machine setting.

So I am stumped.

TIA. Doing this is imperative so I can keep the users of my machines from 
"customizing" the machines to there preferences and then another user in 
another class comes along and his whole setup is different from the 
teachers' machine.


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com

-----

To unsubscribe, send a message to win2kforum-request@xxxxxxxxxxxxx and put 
"unsubscribe" in the subject of the message.
To reach the administrator(s), send a message to 
win2kforum-admins@xxxxxxxxxxxxxx

[win2kforum] Order of priority between Polices and profiles

Other related posts: