Windows NT-2000-XP User Group Policies - Clarification - broke?

Environment ZFD 4.01 ir6
We use to use the Windows NT-2000-XP User Group Policies as a catch all for
our Windows 2000, XPsp1 and XPsp2 policies. Since applying ir6, I've
noticed it does not let me use this option anymore. Could someone clarify
my questions.
Does this mean..
I must use a Windows 2000 machine to configure the Windows 2000 policies and
save those group policies files in a different network location? Likewise,
should I use a WinXP sp1 machine, configure and save those group policies
files to a separate folder than W2K files? And then use a WinXP sp2 machine
and repeat the above? It seems that I when I use a WinXP sp2 machine to
configure the policies, my XPsp1 machines don't read the policies.
Thanks

Greg,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at
http://support.novell.com.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://support.novell.com/forums)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Similar Messages

  • Import Windows 2000 Group Policies

    Hi!
    We currently have our group policies coming from a Windows 2000 server.
    We would like to change this so all group policies come from Zenworks.
    We are running Zfd 3.2. Has anyone done this before or have any ideas
    what the best way to do this would be?
    Thanks...

    Thanks Jared!
    Jared L Jennings wrote:
    > Kathy Morrison,
    >
    >
    >> We are running Zfd 3.2. Has anyone done this before or have any
    >>ideas what the best way to do this would be?
    >
    >
    > Unless I am forgetting something,
    >
    > You can in the ZEN GP import the policy from a domain, or copy the
    > Grouppolicies from the w2k server to your novell server and then setup
    > the ZEN policies.
    >
    > As long as you have the workstation manager installed, then your ZFD
    > policies should apply.
    >

  • How can I configure FireFox security setting globally for all users on a PC? Is there something I can do in group policies or throught the registry to insure all users have the same settings?

    Our Bank's core processor has rewritten their product to run in a web browser. Their browser of choice is Firefox 3.6. The specifications from our core processor specify specific security and settings parameters that must be adhered to by all users for their product to run properly. Is there a way to globally configure these settings via the registry or group policies to insure everyone who logs in to a given workstation opens Firefox with the same settings? Thank you for any assistance you can provide - Steve Gish, First Bank Kansas.
    == User Agent ==
    Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)

    You can try:
    *http://kb.mozillazine.org/Locking_preferences

  • Integration - Windows Server 2003/2008R2: Creating a login script that attaches programs to a certain user group. Upgrading to Windows 7/8

    We are currently running a windows server 2003 environment with a 2003 server being the DC. We have a couple of 2008 r2 servers that are member servers.
    OK...
    Our users are primarily operating off of windows xp clients/workstations in which they use RDP to connect to the newer member servers that are windows 2008. With their base profile in xp I am using roaming profiles via server 2003. I am looking to begin
    upgrading all of the workstations to all-in-one windows7/8 boxes partially because of cosmetic reasons(#weird) and partially because we will eventually begin using the camera options that are in the all-in-one's.
    Also..I must do this one at a time as we don't have the money to do a complete overhaul of all client workstations..If that was the case, I could just redo the network and make those members servers the DC and backup DC as well as add a virtual server
    in which everyone can access those legacy programs that are still needed...
    As you guys know windows 7/8 boxes will not work with server 2003 and roaming profiles. The reason we don't completely upgrade to 2008 r2 environment is because we are still holding on to a legacy program that requires server 2003 and these programs are
    vital to our operation.
    So..broken down even further...
    A: User is part of a 'LocalAdmins' group that makes them automatically a local admin upon any system within our domain.
    B: User  logs in to windows xp with credentials in which a tailored made per user roaming profile comes up from server 2003
    C: User then logs into one of the two terminal servers via RDP with same credentials and accesses new primary application. To access the legacy applications, they merely minimize their RDP session to get back to the windows xp session.
    Ultimately..
    1. I'd like to begin replacing option B: with windows 7/8 all-in-ones and and have the RDP saved sessions,that talk to the 2008 member servers, as well as, a few vital ie shortcuts automatically come to all users that are apart of that "LocalAdmins
    group period.
    2. Setup 1 server 2003 box that runs that legacy program and allow everyone access via a Virtual Environment..
    3. If they log into a windows xp box, or a windows 7/8 box, I want them to have access to the same icons.
    I guess this is a lot to digest, but my question is, what script could I make that would essentially allow uniformity for both my xp workstations and newly added windows 7/8 boxes? What script could I create that would,I guess reside on server 2003, that
    brings all the neccessary icons to the users that are apart of that "LocalAdmins" group despite having a windows xp, 7, or 8 workstation?

    " I don't see what the issue is because a logon script will still be managed by Group Policy and will have to be applied using GP rules.  In the end you still have to write the script."
    You basically contradicted the smug part of your rant and multiple answers with this statement!!! You just recognized that some sort of script would be necessary if I chose to use it via group policy. 
    But according to you..
    "It is not and has never been done via a script."
    Clearly it has a section per user for a "profile path" and a "logon SCRIPT". Which warrants my creation of this post since I have currentely implemented
    roaming profiles. That is how I am manipulating what users can have on their desktop because of course, we have different users that have different needs. But out of all the users, there are programs that need to be laced and seen upon immediate login.I
    will consult other people as this is only preliminary planning but about half of your statements are completely unwarranted and UNNECESSARY!
    This statement also proves your additional inaccuracies...
    "All of the profile things are handled by Windows and have nothing to do with scripts.  You define all of that in Group Policy."
    That's just silly talk. I told you in my initial break down of my scenario in an entirety that I am using "tailored made per user roaming profiles" to control desktop environments not group policies in this case. But you just made an absolute statement in
    saying "You define all of that in Group policy" which is completely wrong...
    Do me a favor, please don't respond to this post anymore. I'd love to see if any other partner, staff or whatever mind responding. Thank you for your help anyway. I will use what is useful in your post and discard the rest.
    Thanks

  • Several Group policies on user

    Is it possible to have several windows group policies on a user?
    If it is a general gpo associated to the container, and a another to a user
    or a group a user is member of, which one will be the effective? The closest
    to the user or a mix of all of them?
    I have done like that and get strange errors.
    /Leif

    Thanks Rolf!
    Exactly the answer I wanted.
    Must also thank you again for the tip on how to distribute certificates with
    GPO.
    It works great!
    Regards
    Leif
    "Rolf Lidvall" <[email protected]> skrev i meddelandet
    news:W1ike.670$[email protected]..
    > Group Policies are additive and they apply in the order
    > you have set in your Search Policy Search Order:
    > http://www.novell.com/documentation/...k.html#a777rvi
    > "Additive Group Policies:
    > Group policies are now additive. This means that settings from multiple
    > Group policies are cumulatively effective, rather than individually.
    > Settings from multiple Group policies can affect users and workstations.
    > Policies start with the local Group policy settings and are applied in
    > reverse of the policy search order. This means that a setting in a policy
    > applied first has lowest priority and its value is overwritten by any
    > other
    > policy with the same setting.
    > Security settings are not additive; they are set by the last effective
    > policy."
    >
    > See also:
    > http://www.novell.com/documentation/...a/a779n8h.html
    >
    > Regards
    > Rolf Lidvall
    > Swedish Radio (Ltd)
    > NSC SysOp
    >
    >

  • Group policies not applied after upgrading to Windows 10

    After signing in on my T430 the group policies delivered by the AD-server are not applied. In particular the network drives don't get mapped (there are some other policies as well, but that's the bigggest problem). When i wait for some minutes in order to force a group policies update, the network drives are slowly getting mapped. The network connection works after signing in and the connection to the server is stable. I set up a clean Windows 10 installation on my T430 (instead of before just upgrading from Windows 8.1) and without installing any third party programs oder drivers and I experience exactly the same problem. On 6 other desktop-computers Windows 10 works fine, just our 2 upgraded Lenovos don't apply the group policies after signing in. I restored my Windows 8.1 image and now it works fine again, the group policies are applied after signing in. Has anyone else experienced this problem yet and found a solution for this?

    I have contacted Lenovo via phone support. They told me Windows 10 isn't tested yet, they have not made any experiences so far and in order to that officially don't support Windows 10. Drivers may work, may not work. Contrary to this list - https://support.lenovo.com/us/en/documents/ht103535 We don't use any wmi filters. But what troubles me ist that at the first login of a user all group policies are applied, including mapped network drives. So everything is fine. But all further logins make it not work. I have contacted Microsoft at well, they tell me to contact Lenovo. Lenovo on the other hand tells me to contact Microsoft...

  • Migrate from Zenworks Windows Policies to AD Group Policies

    Untill now we have been using Zenworks Windows policies to configure some settings.
    We have now migrated to an AD Domain and start to use Domain Group Policies.
    We have recreated a few policies in the AD, but they are not getting applied to our clients.
    What is the correct way to migrate from the one to the other?

    This is likely due to a VERY DUMB default IE GPO settings.
    By Default, IE GPO settings never reapply.
    Try changing your AD IE GPO to tell it to always apply the IE settings.
    See - http://www.novell.com/support/kb/doc.php?id=7008026
    On 2/27/2013 3:56 AM, Quinky wrote:
    >
    > Okay, I understand that.
    > I've disabled one policy and recreated it in AD.
    > But this policy does not get applied.
    > It's a policy that sets some IE settings (Only User configuration).
    > But when I run a gpupdate /force and a gpresult on a workstation, it
    > only states that Local User Policies are applied (a.k.a. the zenworks
    > ones).
    >
    >
    Craig Wilson - MCNE, MCSE, CCNA
    Novell Knowledge Partner
    Novell does not officially monitor these forums.
    Suggestions/Opinions/Statements made by me are solely my own.
    These thoughts may not be shared by either Novell or any rational human.

  • Add userid to user group in Windows Vista OS

    The operating system is WINDOWS VISTA on my machine. I successfully installed Oracle 10 R2 10.2.0.3 and upgraded it to 10.2.0.4.
    I have the following issue after upgrading to 10.2.0.4:
    From the DOS command prompt, I ran as "Run as Administrator" and then did I did sqlplus /nolog.
    I have the following issue when I CONNECT / AS SYSDBA:
    When I do sqlplus /nolog and CONNECT / AS SYSDBA, I get the following error:
    SQL&gt; connect / as sysdba
    ORA-01031 insufficient privileges
    {color:#0000ff}I should be able to CONNECT / AS SYSDBA without using the SYS password to do exports and imports.
    Oracle suggests that I could ADD my userid on my machine to the ORA_DBA group (Windows Group) and this could fix the issue.
    Please let me know where I can find the ORA_DBA group (Windows Group) in WINDOWS VISTA.
    How do I add my userid to the ORA_DBA group in Windows Vista?
    {color}
    Thanks!

    Duplicate Thread.
    Add userid to user group in

  • How to create more than 2000 users/groups in a good way.

    Hi, guys.I want to create more than 2000 users/groups with Java API. Now I use a regular method to implement this function, login; create a domain; open a maxlsession ; and then call a maxl statement to create a user or a group . I find that the performance of this way is very bad. Can I write a funcation or a marco, which can create these users/groups? If it works, How do I need to write these codes?I have looked over all Java API document, it seems that ESSBASE API don't provide some related api which enables developer to generate a function or a marco. If you know the answer to this question, please tell me. thanks in advance.

    Dear Frank,
    Thank you so much for your answer. Beside the save point functionality to save the state and values on the screen, do you know other ways to do the same function? Once again, thank you so much.
    Linh Nguyen.

  • Cannot Edit Group Policies - Windows Server 2003 R2

    Hello, everyone.
     I have a server running Windows Server 2003 R2 Standard Edition Service Pack 2 32-bit. Group policies were working fine until sometime last week. Now, whenever I would launch GPMC, I would get an error message that said "Windows cannot find gpedit.msc.
    Make sure you typed the name correctly and try again.' Then, after I click OK, I would get another error message that said "Failed to start the group policy snap-in. The gpedit.msc file may be missing, files with the .msc extension may not be associated
    with mmc.exe, or you may not have the appropriate rights."
    I removed GPMC to see if that would work, but I still get the same error messages when I try to edit group policies through ADUC.  I also tried de-registering and re-registering the gpedit .dll files but I did not have any luck.
    Is there anything else I can try? I do not have any group policies that I need to deploy at the moment, but I would like to get this fixed as soon as possible.

    > snap-in. The gpedit.msc file may be missing, files with the .msc
    > extension may not be associated with mmc.exe, or you may not have the
    > appropriate rights."
    So you verified that gpedit.msc exists and that it can be launched
    through "run"?
    > de-registering and re-registering the gpedit .dll files but I did not
    How did you do that exactly?
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • Windows user groups with # character ok?

    I wanted to know if a windows user group is used in SQL server 2008R2 which contains a naming convemtion that includes the # character would operate ok within BizTalk databases.
      eg.  domain\#mg-dd-something
    Any help and advice would be greatly appreciated.

    But in this context, its the backslash that is the special character. A legal identifier in SQL Server consists of alphanumeric characters + plus the characters _, #, @ and $. Of these $ can never been used initially. @ can only be used initially for variables.
    # can be used initially without restrictions except for objects in sys.objecs, where it only can be used for stored procedures and tables and for these have a special meaning. For non-object objects, # can be used freely. Underscore should never been an issue,
    as it is commonly used an identifier in many languages.
    So this is legal:
    create login #nisse@manpower with password ='hult'
    Whether you should use it? There is certainly a bigger risk that you run into issues. Not necessarily in SQL Server itself. It could also be with other MS products or third-party software. And not forget people in your organisation who will be confused by
    it.
    Erland Sommarskog, SQL Server MVP, [email protected]

  • Windows user group for BizTalk contains # characters

    I wanted to know if a windows user group is used in BizTalk Server 2013 which contains a naming convention that includes the # character would operate ok in BizTalk and SQL.  PLease see the example below:
      eg.  domain\#mg-dd-BizTalk-SSO-Affiliate-Admins
    Any help and advice would be greatly appreciated.

    Hi Chris,
    There are some naming conventions followed while creating the Windows user groups. not a concrete ones..one of them is here.
    http://technet.microsoft.com/en-us/library/cc775802(v=ws.10).aspx
    When it comes to BizTalk, if I can recollect, one of our clients had Windows user group with a symbol like yours which did work without any issues. But we suggested them to change the user group's name as this could affect some of our automated scripts like
    Powershell/C# programs. For which they agreed and changed their Windows user group to ones without any symbols.
    Yes, this would work but might fail for any of your automated maintenance scripts. Note: This experience with my client is with BizTalk 2006 and I have tested the case for latest versions.
    If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful by clicking the upward arrow mark next to my reply.

  • TS5292 What do I do if my original user account is not showing up in the Users & Groups window?

    I can't find any of my mom's information that was on her computer before I convinced to do the upgrade. HELP!!!!!
    I did the upgrade on my iMac with no problems.

    First, back up that folder. I don't think anything will happen to it, but I wouldn't take a chance.
    Next, go to Users & Groups and create a new account.
    Set the short user name to the exact same as that folder.
    When you create the account, it should warn that a home folder already exists and allow you to use it. Select that option.
    You should then be able to log into that account and everything will be as it was.
    Make sure you use the same password so that keychain will unlock normally.

  • Domain Users Group is a Protected Group on the Domain

    I'm having an issue where I set some permissions for a particular users mailbox, but when I come back later the permissions later they have been removed. I have done some digging around and I believe the issue is a result of the Domain Users group being
    protected, which has led me to the AdminSDHolder object in the System OU. Does anyone know if it possible to amend the the security permissions, so that the group is no longer protected as it is causing some major issues for me.
    Any suggestions would be appreciated
    Thanks in Advance

    I just want to add to make sure that the user is not part of another group that may be nested in another group that is protected.
    I had that issue with a customer, a police dept, after I migrated them to Exchange 2010 when some, but not all users, had issues with their mobile devices accessing Exchange ActiveSync. I found it was previously created users and
    not new users, that had the problem. They had a number of users in administrative groups when they had one server that was a DC (previously SBS), and everyone in the organization had access to it, which required users to have administrative
    rights, at least that's how they did it back then by the previous administrator, to provide them local logon rights. 
    With the help of a tool from Joe Richards, I had to hunt down each nested administrative group the users were in to remove them or change the AdminCount attribute to 0 before setting to allow  inheritance otherwise it would set itself back when
    AdminSDHolder runs every hour.
    This was all discussed in the following TechNet thread:
    https://social.technet.microsoft.com/Forums/scriptcenter/en-US/269e0ab2-6e65-4001-abcb-3c89f6f938fd/issues-with-adminsdholder?forum=winserverDS
    Also, take a look at this PW script that is supposed to look for all of that, at least that was my last discussion with the author mentioning that each group that a user is part of must be checked, when he posted the script to the ADDS group
    in FB (https://www.facebook.com/groups/ADDSForum/):
    Exchange Checkbox of Doom
    http://www.dexterposh.com/2014/12/powershell-exchange-checkbox-of-doom.html
    Ace Fekay
    MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services
    Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
    This posting is provided AS-IS with no warranties or guarantees and confers no rights.

  • Office 2013 group policies - not working

    I'm using Office 2013 Pro Plus SP1 (volume license) on a Windows 7 Pro machine [both are 32 bit].   While I have Server 2003, it's configured to work with Windows 7 and Office 2013 Group Policy templates.  I use RSAT on a Win 7 computer to
    create/manage the Group Policies.
    Since we're not using Office 365, I'm trying to block some of those features, as well as disabling the Office Start screens.
    Thinking that SP1 might be the problem, I downloaded the group policy templates for SP1 and copied them to the server.
    If I create a policy (Office_2013_settings), with a few settings, like "Block singing into Office".  In Group Policy, I disabled the Computer Configuration, leaving the User Configuration enabled.  If I force group policy on the target
    computer and look at RSOP, I see the computer configuration settings disabled, but nothing for the user configuration, although it's enabled in the policy. 
    If I put a junk policy entry on the computer configuration and enable both policies on the backend, force group policy on the computer, and look at RSOP, under computer configuration, I see the Office_2013_settings policy, but the policy still doesn't appear
    in the user configuration.  If I scroll to the bottom of the file, where I can see other Administrative templates and their settings, my Office_2013_settings aren't visible.

    I have created a group policy with a few settings, and applied to my own computer. It seems to be very nice to me. Please first check the apply status on the client site based on the GPSVC.log
    Thinking the issue might be on the way how you create/manage the Group Policies on Windows Server side. Please check the model of how you deploy your group policy, on a domain or OU level?  Loopback Merge or Replace? This might affect whether the user
    would receive all settings from GPO applied to User or Computer. This article might be useful to you:
    http://blogs.technet.com/b/askds/archive/2013/02/08/circle-back-to-loopback.aspx
    This might be an issue on Windows server side, you may need to post your question to below forum to get more suggestions:
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?category=windowsserver

Maybe you are looking for