Group Policy

Hello John,

As asked before which IE versions are in use, there are some problems with
the differnet versions as far as i know?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> You know, out of curiosity, I joined a Vista Ultimate VM to my domain
> and the GP works with Vista. Is XP not compatible with Server 2008
> Enterprise?
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:. com...
>
>> Hello John,
>>
>> You have configured/linked the GPO within GPMC, so start with
>> Computer/User configuration,.............................etc.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Where is the path located?
>>>
>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>> news:. com...
>>>
>>>> Hello John,
>>>>
>>>> Check that the IE version is supported, shown in the settings
>>>> description. Please post the path to the GPO setting.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> yes, and all looks good. Here is the strange part. My group
>>>>> policy took affect on the server and not the client. What do you
>>>>> think?
>>>>>
>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>>>> news:. com...
>>>>>
>>>>>> Hello John,
>>>>>>
>>>>>> Did you check with RSOP.msc that the changes are shown?
>>>>>>
>>>>>> Best regards
>>>>>>
>>>>>> Meinolf Weber
>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>>> and
>>>>>> confers no rights.
>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>> ** HELP us help YOU!!!
>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>> I added a few URLs to IE for testing purposes. I ran the below
>>>>>>> command and logged off and logged on. Still, my changes are not
>>>>>>> there. I know I am missing something here.
>>>>>>>
>>>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in
>>>>>>> message news:. com...
>>>>>>>
>>>>>>>> Hello John,
>>>>>>>>
>>>>>>>> Group policy refresh is done automatically between 90-120
>>>>>>>> minutes. If you like to changes immediately you have to make
>>>>>>>> sure changes are replicated between all DCs and then run
>>>>>>>> gpupdate /force on the client machine to update the settings.
>>>>>>>>
>>>>>>>> Best regards
>>>>>>>>
>>>>>>>> Meinolf Weber
>>>>>>>> Disclaimer: This posting is provided "AS IS" with no
>>>>>>>> warranties,
>>>>>>>> and
>>>>>>>> confers no rights.
>>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>>> ** HELP us help YOU!!!
>>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>>> I can make all types of changes in the group policy manager,
>>>>>>>>> but I do not see any changes on the client side. What the heck
>>>>>>>>> am I doing wrong?
>>>>>>>>>
>>>>>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in
>>>>>>>>> message
>>>>>>>>> news:. com...
>>>>>>>>>
>>>>>>>>>> Hello John,
>>>>>>>>>>
>>>>>>>>>> RSOP is to view the current settings. Changes you have to do
>>>>>>>>>> in the GPO.
>>>>>>>>>>
>>>>>>>>>> Best regards
>>>>>>>>>>
>>>>>>>>>> Meinolf Weber
>>>>>>>>>> Disclaimer: This posting is provided "AS IS" with no
>>>>>>>>>> warranties,
>>>>>>>>>> and
>>>>>>>>>> confers no rights.
>>>>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>>>>> ** HELP us help YOU!!!
>>>>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>>>>> Thank you. I did what you said and when I go to make changes
>>>>>>>>>>> in the Resultant Set of Policy, everything is grayed out.
>>>>>>>>>>> Any ideas?
>>>>>>>>>>>
>>>>>>>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in
>>>>>>>>>>> message
>>>>>>>>>>> news:. com...
>>>>>>>>>>>
>>>>>>>>>>>> Hello John,
>>>>>>>>>>>>
>>>>>>>>>>>> The client must be located in the OU where the GPO is
>>>>>>>>>>>> linked to. After that run gpupdate /force on the client or
>>>>>>>>>>>> restart the machine. Now you should see in gpresult /v that
>>>>>>>>>>>> the GPO is listed as applied and rsop.msc should show you
>>>>>>>>>>>> all the settings on the client.
>>>>>>>>>>>>
>>>>>>>>>>>> Keep in mind that there exists a computer and user
>>>>>>>>>>>> configuration part, so also the user has to be located in
>>>>>>>>>>>> the OU if you configure user settings in the GPO.
>>>>>>>>>>>>
>>>>>>>>>>>> Best regards
>>>>>>>>>>>>
>>>>>>>>>>>> Meinolf Weber
>>>>>>>>>>>> Disclaimer: This posting is provided "AS IS" with no
>>>>>>>>>>>> warranties,
>>>>>>>>>>>> and
>>>>>>>>>>>> confers no rights.
>>>>>>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>>>>>>> ** HELP us help YOU!!!
>>>>>>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>>>>>>> Yes, I actually got this part established after I posted
>>>>>>>>>>>>> it. OK, so how to my modifications that I make on the
>>>>>>>>>>>>> server affect the client? This where I am stuck.
>>>>>>>>>>>>>
>>>>>>>>>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in
>>>>>>>>>>>>> message
>>>>>>>>>>>>> news:. com...
>>>>>>>>>>>>>
>>>>>>>>>>>>>> Hello John,
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> You use the Group policy management console on the 2008
>>>>>>>>>>>>>> server to create the policy and the on the OU rightclick
>>>>>>>>>>>>>> and choose link an existing GPO(or similar).
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> Best regards
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> Meinolf Weber
>>>>>>>>>>>>>> Disclaimer: This posting is provided "AS IS" with no
>>>>>>>>>>>>>> warranties,
>>>>>>>>>>>>>> and
>>>>>>>>>>>>>> confers no rights.
>>>>>>>>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>>>>>>>>> ** HELP us help YOU!!!
>>>>>>>>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>>>>>>>>> that's where I am confused. How do you link the GPO to
>>>>>>>>>>>>>>> the client machine?
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote
>>>>>>>>>>>>>>> in message
>>>>>>>>>>>>>>> news:. com...
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> Hello John,
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> Yes, you can configure GPO for IE startpage and also
>>>>>>>>>>>>>>>> hide some settings. On the client machine, which must
>>>>>>>>>>>>>>>> be located in the OU where the GPO is linked to, NOT
>>>>>>>>>>>>>>>> the computers CONTAINER, run gpupdate /force and then
>>>>>>>>>>>>>>>> check with gpresult /v or rsop.msc in a command prompt
>>>>>>>>>>>>>>>> if the GPO is applied. I suggest that you not change
>>>>>>>>>>>>>>>> both default policies, on domain level and domain
>>>>>>>>>>>>>>>> controllers OU.
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> Best regards
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> Meinolf Weber
>>>>>>>>>>>>>>>> Disclaimer: This posting is provided "AS IS" with no
>>>>>>>>>>>>>>>> warranties,
>>>>>>>>>>>>>>>> and
>>>>>>>>>>>>>>>> confers no rights.
>>>>>>>>>>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>>>>>>>>>>> ** HELP us help YOU!!!
>>>>>>>>>>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>>>>>>>>>>> Hello everyone! I am running Server 2008 Enterprise
>>>>>>>>>>>>>>>>> and so far all seems to be running well. At this point
>>>>>>>>>>>>>>>>> with my server, I would like to control a few of the
>>>>>>>>>>>>>>>>> settings with my XP clients. At logon, I would like my
>>>>>>>>>>>>>>>>> XP clients to point to a certain website and I would
>>>>>>>>>>>>>>>>> like to hide a few settings.
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Is that done through group policy? I started to play
>>>>>>>>>>>>>>>>> with the Group Policy preference, which seems to be a
>>>>>>>>>>>>>>>>> new feature of Server '08. However, with the changes I
>>>>>>>>>>>>>>>>> have made, I don't see them with the client.
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Am I missing something?
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Thank you.
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> ~John
>>>>>>>>>>>>>>>>>

In the Group Policy Management, under Security Filtering, what groups from
the domain should be listed in there? I have a feeling that is where my
issue is coming from with the administrators desktops being affected by my
group policy.

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:. com...
> Hello John,
>
> As asked before which IE versions are in use, there are some problems with
> the differnet versions as far as i know?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> You know, out of curiosity, I joined a Vista Ultimate VM to my domain
>> and the GP works with Vista. Is XP not compatible with Server 2008
>> Enterprise?
>>
>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>> news:. com...
>>
>>> Hello John,
>>>
>>> You have configured/linked the GPO within GPMC, so start with
>>> Computer/User configuration,.............................etc.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> Where is the path located?
>>>>
>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>>> news:. com...
>>>>
>>>>> Hello John,
>>>>>
>>>>> Check that the IE version is supported, shown in the settings
>>>>> description. Please post the path to the GPO setting.
>>>>>
>>>>> Best regards
>>>>>
>>>>> Meinolf Weber
>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>> and
>>>>> confers no rights.
>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>> yes, and all looks good. Here is the strange part. My group
>>>>>> policy took affect on the server and not the client. What do you
>>>>>> think?
>>>>>>
>>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>>>>> news:. com...
>>>>>>
>>>>>>> Hello John,
>>>>>>>
>>>>>>> Did you check with RSOP.msc that the changes are shown?
>>>>>>>
>>>>>>> Best regards
>>>>>>>
>>>>>>> Meinolf Weber
>>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>>>> and
>>>>>>> confers no rights.
>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>> ** HELP us help YOU!!!
>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>> I added a few URLs to IE for testing purposes. I ran the below
>>>>>>>> command and logged off and logged on. Still, my changes are not
>>>>>>>> there. I know I am missing something here.
>>>>>>>>
>>>>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in
>>>>>>>> message news:. com...
>>>>>>>>
>>>>>>>>> Hello John,
>>>>>>>>>
>>>>>>>>> Group policy refresh is done automatically between 90-120
>>>>>>>>> minutes. If you like to changes immediately you have to make
>>>>>>>>> sure changes are replicated between all DCs and then run
>>>>>>>>> gpupdate /force on the client machine to update the settings.
>>>>>>>>>
>>>>>>>>> Best regards
>>>>>>>>>
>>>>>>>>> Meinolf Weber
>>>>>>>>> Disclaimer: This posting is provided "AS IS" with no
>>>>>>>>> warranties,
>>>>>>>>> and
>>>>>>>>> confers no rights.
>>>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>>>> ** HELP us help YOU!!!
>>>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>>>> I can make all types of changes in the group policy manager,
>>>>>>>>>> but I do not see any changes on the client side. What the heck
>>>>>>>>>> am I doing wrong?
>>>>>>>>>>
>>>>>>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in
>>>>>>>>>> message
>>>>>>>>>> news:. com...
>>>>>>>>>>
>>>>>>>>>>> Hello John,
>>>>>>>>>>>
>>>>>>>>>>> RSOP is to view the current settings. Changes you have to do
>>>>>>>>>>> in the GPO.
>>>>>>>>>>>
>>>>>>>>>>> Best regards
>>>>>>>>>>>
>>>>>>>>>>> Meinolf Weber
>>>>>>>>>>> Disclaimer: This posting is provided "AS IS" with no
>>>>>>>>>>> warranties,
>>>>>>>>>>> and
>>>>>>>>>>> confers no rights.
>>>>>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>>>>>> ** HELP us help YOU!!!
>>>>>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>>>>>> Thank you. I did what you said and when I go to make changes
>>>>>>>>>>>> in the Resultant Set of Policy, everything is grayed out.
>>>>>>>>>>>> Any ideas?
>>>>>>>>>>>>
>>>>>>>>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in
>>>>>>>>>>>> message
>>>>>>>>>>>> news:. com...
>>>>>>>>>>>>
>>>>>>>>>>>>> Hello John,
>>>>>>>>>>>>>
>>>>>>>>>>>>> The client must be located in the OU where the GPO is
>>>>>>>>>>>>> linked to. After that run gpupdate /force on the client or
>>>>>>>>>>>>> restart the machine. Now you should see in gpresult /v that
>>>>>>>>>>>>> the GPO is listed as applied and rsop.msc should show you
>>>>>>>>>>>>> all the settings on the client.
>>>>>>>>>>>>>
>>>>>>>>>>>>> Keep in mind that there exists a computer and user
>>>>>>>>>>>>> configuration part, so also the user has to be located in
>>>>>>>>>>>>> the OU if you configure user settings in the GPO.
>>>>>>>>>>>>>
>>>>>>>>>>>>> Best regards
>>>>>>>>>>>>>
>>>>>>>>>>>>> Meinolf Weber
>>>>>>>>>>>>> Disclaimer: This posting is provided "AS IS" with no
>>>>>>>>>>>>> warranties,
>>>>>>>>>>>>> and
>>>>>>>>>>>>> confers no rights.
>>>>>>>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>>>>>>>> ** HELP us help YOU!!!
>>>>>>>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>>>>>>>> Yes, I actually got this part established after I posted
>>>>>>>>>>>>>> it. OK, so how to my modifications that I make on the
>>>>>>>>>>>>>> server affect the client? This where I am stuck.
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in
>>>>>>>>>>>>>> message
>>>>>>>>>>>>>> news:. com...
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Hello John,
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> You use the Group policy management console on the 2008
>>>>>>>>>>>>>>> server to create the policy and the on the OU rightclick
>>>>>>>>>>>>>>> and choose link an existing GPO(or similar).
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Best regards
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Meinolf Weber
>>>>>>>>>>>>>>> Disclaimer: This posting is provided "AS IS" with no
>>>>>>>>>>>>>>> warranties,
>>>>>>>>>>>>>>> and
>>>>>>>>>>>>>>> confers no rights.
>>>>>>>>>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>>>>>>>>>> ** HELP us help YOU!!!
>>>>>>>>>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>>>>>>>>>> that's where I am confused. How do you link the GPO to
>>>>>>>>>>>>>>>> the client machine?
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote
>>>>>>>>>>>>>>>> in message
>>>>>>>>>>>>>>>> news:. com...
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Hello John,
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Yes, you can configure GPO for IE startpage and also
>>>>>>>>>>>>>>>>> hide some settings. On the client machine, which must
>>>>>>>>>>>>>>>>> be located in the OU where the GPO is linked to, NOT
>>>>>>>>>>>>>>>>> the computers CONTAINER, run gpupdate /force and then
>>>>>>>>>>>>>>>>> check with gpresult /v or rsop.msc in a command prompt
>>>>>>>>>>>>>>>>> if the GPO is applied. I suggest that you not change
>>>>>>>>>>>>>>>>> both default policies, on domain level and domain
>>>>>>>>>>>>>>>>> controllers OU.
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Best regards
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Meinolf Weber
>>>>>>>>>>>>>>>>> Disclaimer: This posting is provided "AS IS" with no
>>>>>>>>>>>>>>>>> warranties,
>>>>>>>>>>>>>>>>> and
>>>>>>>>>>>>>>>>> confers no rights.
>>>>>>>>>>>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>>>>>>>>>>>> ** HELP us help YOU!!!
>>>>>>>>>>>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>>>>>>>>>>>> Hello everyone! I am running Server 2008 Enterprise
>>>>>>>>>>>>>>>>>> and so far all seems to be running well. At this point
>>>>>>>>>>>>>>>>>> with my server, I would like to control a few of the
>>>>>>>>>>>>>>>>>> settings with my XP clients. At logon, I would like my
>>>>>>>>>>>>>>>>>> XP clients to point to a certain website and I would
>>>>>>>>>>>>>>>>>> like to hide a few settings.
>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>> Is that done through group policy? I started to play
>>>>>>>>>>>>>>>>>> with the Group Policy preference, which seems to be a
>>>>>>>>>>>>>>>>>> new feature of Server '08. However, with the changes I
>>>>>>>>>>>>>>>>>> have made, I don't see them with the client.
>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>> Am I missing something?
>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>> Thank you.
>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>> ~John
>>>>>>>>>>>>>>>>>>
>
>