Applying Group Policy vs NTConfig.pol

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello all,
I am hoping someone can help me.
I have an AD with 2000, XP and NT Clients
I have created group policy to managed the 2000 and XP clients
and created a poledit policy to manage to NT clients.

I have found that for some reason, some of the 2000 clients are picking up
the poledit policy instead of the group policy, or, they are picking up
settings from both.

Do you know how I can stop this from happening so that the 2000 clients
apply group policy and not the poledit policy?

Many Thanks


Andy
 
Hi Darren,
Thanks for your reply. I don't think the link provides me with an answer.
Basically we DID have a NT domain and an AD in a trust, the NT domain is no
longer and the trust is removed.

These 2000 PC's are newly built, so know nothing of the old infrastructure
(so they cannot have been tattooed by the old NT domain Policy)

Here is an example, I had to implement a banner for all users that log in.
I have set the banner in Group policy, so the XP PC's (and supposedly 2000
PC's) get it
I wanted to do the same in Poledit for the NT PC's. The trouble was the in
Poledit you are limited to the number of characters in the banner, so I had
to write a shorter one. The .pol file is in the netlogon share of all DC's.
For some reason the 2000 PC's are getting the shorter message from the
poledit policy instead of the one I specified in group policy.

Basically I want the 2000 PC's to ignore the .pol file in the netlogon share
of the DC's and only process Group Policy.


Thanks again

Andy
 
Andy-
That is a bit strange since on those Win2K machines, even if they are
picking the NT 4 policy, it should be overridden by the Group Policy. The
only thing I can think of is that the NT 4 policy puts the banner text into
a different reg key than the Group Policy and that that reg key is somehow
taking precedence. Can you confirm that the reg locations are the same for
both policies (by looking in the adm files for each)?

One alternative that should work is to tell Win2k to completely ignore
system policy. In the old days, I did this by modifying the registry on the
client as follows. Under the
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Update key on a Win2K
machine, change the value of UpdateMode from 1 to 0.

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Whitepapers and Utilities for all things Group Policy-related
Just Released! The new Windows Group Policy Guide from Microsoft Press!!!
Check it out at http://www.microsoft.com/mspress/books/8763.asp
 
Hi Darren,
Thanks for your reply. The NT Policy does put the banner into a different
part of the registry, however, the strange thing is that when looking in the
2 reg locations, only the banner for the Group Policy is there, the NT Policy
banner exists nowhere in the registry.

I have noticed that the c:\documents and settings\all users\ntuser.pol is
different between an XP and 2000 PC.

Unfortunately, the reg key you suggested did not seem to work.

Any other ideas??!

Many Thanks

Andy
 
Back
Top