File System settings on GPO

  • Thread starter Thread starter ExAdmin
  • Start date Start date
E

ExAdmin

Hi,
I've inherited an AD and I'm cleaning things up. One of them is the GPO
settings. Under Computer Configuration>Windows Settings>Security
Settings>File System, there are literally thousands of settings there. I'm
not sure why they're there, but I think its causing the problem of slow boot
times and "Applying Security Settings". Does this sound correct?


Main questions:
-Is there any harm in removing these entries (I don't care if client
machines revert back to a basic permission state).

-Does anyone know of any application that would set this?

-Can anyone recommend a good doc/whitepaper that really gets under the hood
of GPOs?

Thanks,
Daniel
 
Hi Daniel,

There probably won't be any problem if you remove the Policy. The
settings on the local machines will probably not change though. Once
the policy makes a change then the change is in place until you
change it again.

Here are some good things to look at that will give you a better
understanding of Grou Policies:

Enterprise Management with the Group Policy Management Console
http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

Support WebCast: Administration and Implementation of Group Policy in
Microsoft Windows 2000
February 9, 2001
http://support.microsoft.com/servicedesks/webcasts/wc020901/wcblurb020
901.asp

Step-by-Step Guide to Understanding the Group Policy Feature Set
http://www.microsoft.com/WINDOWS2000/library/planning/management/group
steps.asp

Group Policy Simplifies Administration
http://www.microsoft.com/WINDOWS2000/guide/server/solutions/gpsimplifi
es.asp

Step-by-Step Guide to Configuring Enterprise Security Policies
http://www.microsoft.com/WINDOWS2000/library/planning/security/entsecs
teps.asp

I hope this helps.

Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.
 
Thanks for the quick reply Tom. One question: I thought a feature of AD
GPOs were that when you remove the policy, the settings go back to what they
origionally were, unlike NT4.

Thanks for the links!

Daniel
 
Hi Daniel,

As you know policies are applied in the following order:

Local, Site, Domain, OU.

If a Domain Group Policy overwrites a Local Policy then removing the
Domain policy will cause the Local policy to once again be in effect.
If the local polciy was not defined then there will be nothing to
overwirte the settings that the Domain Policy put in place. So as
with most things then answer is "It depends".


Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.
 
Back
Top