Lockdown GPO issue

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi,

At work we have a set homepage in IE which is now unadjustable as we have
installed group policy on each machine. Now our directors have decided to
change their mind ( management ) which would need us to manually visit each
site ( all 40 of em ) and change every machines homepage and disable group
policy etc. A big headache . Is their any way to create a script or
something very similar which we can just send out to our employees on site?

Thanks
 
hi,

no these are either standalone or small workgroups.

Have found what I need to set in group policy but wondering if theres a
command line change I could do to edit gpedit?
 
Well in that case for that setting you could try a .reg file that would look
like the following where you would want to of course modify for the actual
webpage. You could copy into notepad and save with a .reg extension. Then
on a test computer try clicking the .reg file to see if it works for the
users. --- Steve

http://support.microsoft.com/default.aspx?kbid=310516 --- info on using
reg files.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.mypage.com/"
 
that worked in a sense many thanks.

unfortunatly grouppolict is enabled on these pc's and therefor prevents me
from temporarily disabling the policy in place that lets me edit the
registry. Any ideas how to automate this? Save outr users lots of hassle.

Thanks again



Steven L Umbach said:
Well in that case for that setting you could try a .reg file that would look
like the following where you would want to of course modify for the actual
webpage. You could copy into notepad and save with a .reg extension. Then
on a test computer try clicking the .reg file to see if it works for the
users. --- Steve

http://support.microsoft.com/default.aspx?kbid=310516 --- info on using
reg files.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.mypage.com/"


AmyAmandaAllen said:
hi,

no these are either standalone or small workgroups.

Have found what I need to set in group policy but wondering if theres a
command line change I could do to edit gpedit?
Click to expand...
Click to expand...
 
Well not using an Active Directory domain is a huge downside to managing
Group Policy. What you could try is to configure GP the way you want on one
computer and then copy the \Windows\system32\group
policy\user\Microsoft\IEAK folder to other computers you want to change.
That should change that setting in Local Group Policy but it may not refresh
right away though you could try using gpudate /force to do that. You may
also be able to remotely manage Group Policy on other computers using the
mmc snapin for Group Policy and browse or enter the name of the target
computer assuming you have proper network connectivity and are a local
administrator on the target computer if that would help at all. --- Steve



AmyAmandaAllen said:
that worked in a sense many thanks.

unfortunatly grouppolict is enabled on these pc's and therefor prevents me
from temporarily disabling the policy in place that lets me edit the
registry. Any ideas how to automate this? Save outr users lots of hassle.

Thanks again



Steven L Umbach said:
Well in that case for that setting you could try a .reg file that would
look
like the following where you would want to of course modify for the
actual
webpage. You could copy into notepad and save with a .reg extension.
Then
on a test computer try clicking the .reg file to see if it works for the
users. --- Steve

http://support.microsoft.com/default.aspx?kbid=310516 --- info on
using
reg files.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.mypage.com/"


message
hi,

no these are either standalone or small workgroups.

Have found what I need to set in group policy but wondering if theres a
command line change I could do to edit gpedit?

:

Are these computers part of an Active Directory domain?? If they are
you
should be able to use Group Policy. Look at user configuration/Windows
settings/Internet Explorer maintenance/URLs - important URL's. Also
see
the
link below on IE maintenance processing. --- Steve

http://www.sysinternals.com/Utilities/PsShutdown.html

message
Hi,

At work we have a set homepage in IE which is now unadjustable as we
have
installed group policy on each machine. Now our directors have
decided
to
change their mind ( management ) which would need us to manually
visit
each
site ( all 40 of em ) and change every machines homepage and disable
group
policy etc. A big headache . Is their any way to create a script or
something very similar which we can just send out to our employees
on
site?

Thanks
Click to expand...
Click to expand...
Click to expand...
 
Ive sorted it now - thanks for the assist!

MERRY CHRISTMAS !!

Steven L Umbach said:
Well not using an Active Directory domain is a huge downside to managing
Group Policy. What you could try is to configure GP the way you want on one
computer and then copy the \Windows\system32\group
policy\user\Microsoft\IEAK folder to other computers you want to change.
That should change that setting in Local Group Policy but it may not refresh
right away though you could try using gpudate /force to do that. You may
also be able to remotely manage Group Policy on other computers using the
mmc snapin for Group Policy and browse or enter the name of the target
computer assuming you have proper network connectivity and are a local
administrator on the target computer if that would help at all. --- Steve



AmyAmandaAllen said:
that worked in a sense many thanks.

unfortunatly grouppolict is enabled on these pc's and therefor prevents me
from temporarily disabling the policy in place that lets me edit the
registry. Any ideas how to automate this? Save outr users lots of hassle.

Thanks again



Steven L Umbach said:
Well in that case for that setting you could try a .reg file that would
look
like the following where you would want to of course modify for the
actual
webpage. You could copy into notepad and save with a .reg extension.
Then
on a test computer try clicking the .reg file to see if it works for the
users. --- Steve

http://support.microsoft.com/default.aspx?kbid=310516 --- info on
using
reg files.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.mypage.com/"


message
hi,

no these are either standalone or small workgroups.

Have found what I need to set in group policy but wondering if theres a
command line change I could do to edit gpedit?

:

Are these computers part of an Active Directory domain?? If they are
you
should be able to use Group Policy. Look at user configuration/Windows
settings/Internet Explorer maintenance/URLs - important URL's. Also
see
the
link below on IE maintenance processing. --- Steve

http://www.sysinternals.com/Utilities/PsShutdown.html

message
Hi,

At work we have a set homepage in IE which is now unadjustable as we
have
installed group policy on each machine. Now our directors have
decided
to
change their mind ( management ) which would need us to manually
visit
each
site ( all 40 of em ) and change every machines homepage and disable
group
policy etc. A big headache . Is their any way to create a script or
something very similar which we can just send out to our employees
on
site?

Thanks
Click to expand...
Click to expand...
Click to expand...
 
Back
Top