Windows Forum

Ask something
Discussion Locked

Profiles & Policy Experts ONLY!

0 helpful
9 replies

by qultptry 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I'm still drowning! NT SERVER/ 95 Clients in classroom. Was using 95 editor, now NT (won't hand off restrictions. Policy saved as config.pol in system33\repl\imports\scripts (shared as netlogon). 95 client doesn't get restrictions?? User manager =for 95 client: in the home directory connect: \\servername\profiles$\jdoe. I tried user profile path (doesn't hand off profile). NOTE: whenever I add a new user on the same PC, they get old restrictions (no run command - even though the policy says "YES" this new person can have "RUN". I have numerous students using same PC's, I want them to have roaming, and get individual policies as well! I've tried deleting local profiles as well as those on server! PLEASE HELP!! I have tried everything! Was working with 95 editor, but then said "couldn't find address book when adding a new group", also the same old problem that a new user on PC gets handed "old restrictions from previous user" GOOD LORD.... can anybody help me? Im offering 200 points only becaus

9 replies

by joncr

When a policy is run it changes the registry setting in HKEY_CURRENT_USER. If this policy is removed (deleted) the registry entry remains leaving the run setting as it was.

I think your next troubleshooting step is to remove policies from the system and look through the .adm files to find the registry key that sets the run off or on. Change this in regedit and logoff and on to see if this changes the state of run for that user. If it works then the problem lies with policies, if it doesn't then the problem lies with your profiles.

by Member 33070795

NT uses the "Profiles" directory but Win95 uses the "Home" directory as defined in User Manager and that's where 95 will look for profiles.
Policies are indeed (by default) downloaded from the Netlogon folder. Individual policies over ride group policies which in turn over ride default policies.
The Win95 ResourceKit goes on for some time about policies. Too much information for this small space.
If I missed the point, I am sorry. I hope some of this is helpful.

by Member 33070795

NT uses the "Profiles" directory but Win95 uses the "Home" directory as defined in User Manager and that's where 95 will look for profiles.
Policies are indeed (by default) downloaded from the Netlogon folder. Individual policies over ride group policies which in turn over ride default policies.
The Win95 ResourceKit goes on for some time about policies. Too much information for this small space.
If I missed the point, I am sorry. I hope some of this is helpful.

by vshipp

First thing to do is to create a Policy_Administrator GroupID object in CONFIG.pol and load EVERY *.adm file into the policy editor that you are using. Next open the administrator object and remove the offending policies (Remember: checked=ON Grey=NO CHANGE Unchecked=REMOVE)then set the priority for this group to the top of the list. Make an NT domain global group called Policy_Administrator, Put your userid into this group, make sure your ID is both Local machine Administrator, and Domain Admin. Now logon to each student machine with this ID and check the restrictions, if needed modify the Policy_Admin again as necessary and logon again, when all policies have been cleared, delete all roaming profiles and local profiles then start over with a clean slate. lastly, Do not let users introduce rogue *.adm files or registry modifications can get lost forever!

This discussion is closed to new replies.