Windows Forum

Ask something
Discussion Locked

Policy Editor

0 helpful
5 replies

by azizhakim 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Good morning,peers.
Implementing system policy on an nt 4.0 domain controller.Here is the problem area & the sequence I have used to implement.Replication has been set up with all DC's,verified with alerts,scripts have replicated with bdc's.Createdone policy for
one group(accounting).policy is enforced,Now is the sticky part.I would like to implement a different set of restrictions to a Second group(Sales)the policy does not apply.The sequence I used is created a new policy for sales with necessary restrictions./file/save,I am inclined to think the editor will save in current config file for particular group & implement as group logon,but it saves but does not force applying the restriction.I hope I am not the only one struggling with poledit since I have been @ it this entire week.Any thoughts is most welcome& Thanx

5 replies

by tekcetera

The policy file is NTconfig.pol and it must be stored in the netlogon share (C:\winnt\system32\repl\imports\scripts) on the PDC and on any BDCs. Use NT global groups to create your policies for different groups. Go to poledit, and open your current policy file (name and location above). Make a backup of it first (ntconfig.bak). Choose to add an NT group (sales) to that policy, make their restrictions and save it to the same policy.

by tekcetera

Forgot to mention that the MS tech net article Q185589 is an excellent resource for system policy info.

by azizhakim

Bravo,I must say I committed the ultimate booboo.Everything was done very accurately except the user was not in my accounts group.Boy quite a relief,Thanx for quick responce,chow

This discussion is closed to new replies.