Community archive

Ask something
Discussion Locked

System policy beginner

0 helpful
10 replies

by it support services manager

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am new to using system policies. I have a network with two NT servers and 85 windows 98 workstations. I installed the Windows 98 system policy editor on my computer and made a policy, which I named config.pol, with the usual default computer and default user. I then added one user, lrctest, which is a test account. On this user I changed the wallpaper and removed the rights to enter MSDOS. I saved the policy as config.pol and, by using a floppy disk to save the policy, I installed it on the domain server in the
wnnt/system32/repl/import/scripts and the export scripts folders. All users are logging on to the domain, we are using TweakUI to force the login. The test user is not picking up the changes in the policy. What step or steps have I left out? I would appreciate any advice.

10 replies

by guy

1) You are correct in calling it Config.pol for Win 9x clients. (NT Clients need a separate file called NTConfig.pol)
2) You are correct in saving it to the NETLOGON share \winnt\system32\repl\import\scripts.
3) The test user ICRTEST, I take thatthis is an NT Account?
4) Go back to the test machine, and check that policy is being downloaded from the REMOTE location.
In poledit, check Open Registry, Network, System Policy Update, Remote update AUTOMATIC
5) Alternatively, only for troubleshooting, you could set the above setting to MANUAL, then log on and see if it works.
5) If you have BDC,s (Backup Domain Controllers) then you need to copy the Config.pol to each one's NETLOGON Share, especially to the one where Irctest is logging on from.

by calves

Why not use the system policy from User Manager for Domains, Policies?
What you using, as I understand, has to be done in every computer with the diskette, same diskette I may add. I don't think it will work like scripts, you either, take the diskette to every workstation or set it up from User Manager for Domains.

Good luck!

by overloaded

I agree with proposed answer #1, make sure all domain controllers contain a recent copy of your config.pol file. Instead of using Tweak UI there is a policy I use that is on windows.adm that will force a domain logon. I'm sure the resulting registry change is the same or at least similar, but it is an option to consider. This way your users can't change the setting back to default by using TweakUI.

This discussion is closed to new replies.