[win2kforum] Repost of order of Policies and profiles

  • From: "Robert Davis" <sniper_lt@xxxxxxxxxxx>
  • To: win2kforum@xxxxxxxxxxxxx
  • Date: Thu, 03 May 2001 18:09:59 -0000

I posted this some time ago. Someone suggested that I past it again since I 
did not get a response and it might have been missed.



From: "Robert Davis" <sniper_lt@xxxxxxxxxxx>
Subject: [win2kforum] Order of priority between Polices and profiles
Date: Fri, 27 Apr 2001 20:15:08 -0000


I run a network with a win2k server connected to a 100Base-T network with 25
win98 clients. I have set a the registry of all the clients to validate user
logons to the network with the server.

I have been trying to set up group policies for my users. I followed the
instructions at www.elkanter.net/security/security.htm. This is and
excellent tutorial on using system policy editor written by Stacey
Anderson-Redick.

She start by saying that you need to edit the registry of each machine to
allow remote updates.

I did that to 3 test machines.

Then enable user profiles on each machines.

I did that.

Then she suggest creating and test user with only one setting that is to set
the windows wallpaper to sandstone.bmp. Then save that to a config.pol file
and copy it to the netlogon share of the server. This is just to test that
the config.pol file is being copied to the registry of the client. Then log
on as that test user to see if the wallpaper changed to sandstone.bmp

I did that.

The problem is that when I logged on as that test user. The wallpaper
changed briefly to sandstone. then changed back to the default light green
wall paper that I have every machine set to.

I thought that maybe that user policy was being overridden but something
else.

At www.globetrotting.com/winnt.pol.html  its says the the "pecking order"
for Systems Policies is.
" 1. Machine, Machine Policies can over wrote the User/Group setting"
" 2. User, User Policies completely bypass Group policies( no precedence,
just replacement)"
" 3. Group..."
" 4. All of these can overide Profile Settings."

Can someone tell me if this order is true?

If this is true might it be that something in the local machine registry is
overiding the test users' policy and that is why the wallpaper is changing
back to light green default?

I checked the local machine setting with systems policy editor and there is
no setting (check mark) for wall paper in the local machine setting.

So I am stumped.

TIA. Doing this is imperative so I can keep the users of my machines from
"customizing" the machines to there preferences and then another user in
another class comes along and his whole setup is different from the
teachers' machine.


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com

-----

To unsubscribe, send a message to win2kforum-request@xxxxxxxxxxxxx and put 
"unsubscribe" in the subject of the message.
To reach the administrator(s), send a message to 
win2kforum-admins@xxxxxxxxxxxxxx

Other related posts: