Discussion Locked

Group policies with winxp

0 helpful
12 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi

How do you set winxp to pick up group policies from windows NT server, from the netlogon share. Can you use poledit with winxp, if not how do you get winxp to pick up policies. The reason I,m asking is I work in a school with NT4 server with win95/98 clients, these all work with no problem. We are ready to buy some new machines, and our supplier is only dealing with winxp pro. I need to set these machines up with policies which stop the pupils accessing parts of the system, which they can delete or corupt eg. locking desktop, hiding drives etc. Any help would be very apppreciated.

Thanks in advance

G Smith

12 replies

by sturner

You no longer use pole edit with Win 2000 and above (Including XP) You now have GPO's that will allow you to completly lock down the system for users that do not need access to certain areas.

by sturner

You no longer use pole edit with Win 2000 and above (Including XP) You now have GPO's that will allow you to completly lock down the system for users that do not need access to certain areas.

Look in any XP or 2000 admin book or resource and you can quickly learn how this works

by sturner

GPO's are not are part of Active Directory. You can take a Windows 2K Pro machine not connected to a network and still institue a Local GPO.

Now GPO's can be set on an Organizational Unit in Active Directory and that is carried through AD, but it is not a requirement.

by sturner

I digress:

GPO=Local Security Policy

They are the same thing except ones local and ones doamin.

by gazza7

I've look at various admin books on winxp but these seem to only mention GPO's with the Active Directory on win 2000 servers. There seems to be no mention how to use GPO with NT4 server.
Any help to, how to set up GPO's with NT4 server would be appreiciated.

Thanks again

by sbaltus

I know that 0n windows 2000 you can not use a windows NT server to had out policies to 2000 client I am almost positive that the same goes for xp. The reson being is that GPO's are part of active directory which is not on NT.You could go and set allthe security policies local on each client

by dao251

NT4 Computer/User Policy will work with 2K/XP the same way they worked with NT4 clients.

Group policy things are just extension of that NT4 concept.

In case you used policies with your 95/98 clients and want these worked with NT/2K/XP clients, you should note they cannot. That's because NT clients use different policy editor and different .POL file (NTconfig.pol instead Config.pol). So any case, using mixed clients you have to use two policy files -- one for 9x/ME and another for NT/2K/XP.

Well, after migration to 2k+AD some things become more "logical", maybe it does make sense to start with migration to AD.

Dima

This discussion is closed to new replies.