Discussion Locked

user policies WITHOUT any profiles

0 helpful
9 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have 2 NT4 servers and Win95/98 workstations. We have both computer and user policies in place. The user policies keep regular users from making changes to the network control panel, display, etc. In order to make the user policies work, we had togo to the user profiles tab under PASSWORDS control panel and check "users can customize their settings...". Annoyingly, this causes a question asking users if they want to save individual settings, whenever they log on. Our logon script not only deletes profiles saved locally on the system, but copies new icons to the desktop. If the user answers NO to the individual settings question, it's all good. If they answer yes, the new icons do not copy. I don't even want to have profiles enabled, I just need to be able to implement those user policies. We can't use mandatory profiles because in addition to the standard set of icons that go on all computers, individual teachers have icons for their own programs. Is there any way to solve this dilemma?

9 replies

by basicit

You can setup mandatory profiles based on user global groups. create groups and with system policy editor apply policies based on group membership.

by mike (from canada)

I recommend this: Set-up your computer so that windows thinks you are using this computer alone. Once you have that, you will NOT see the login screen at startup and windows will load. so what you can do is go to a download site and look for a security program and then use that and make sure that loads BEFORE the windows desktop appears.

by strakovsky

Well, your network policies good, but the implementation is kinda unique. :) You're trying to make life harder than it suppose to be...

Why do you fight with profiles at all while 9x is not complying to NT-security policy? Why don't you just hide Control Panel icon from user desktop? HowTo? Try XTeq X-Setup once (http://www.xteq.com/) and you'll find what it does with registry key {21EC2020-3AEA-1069-A2DD-08002B30309D}.
Take a look at Appearance->Start menu->Visible Items->"Visible Items in start->Settings". More over, you could customize your Control Panel at Appearance->Control Panel->General Icons.
Tip: All of the plugins use definitions stored in text files. So it's not really hard to configure one machine the way you want, makesimple .reg file and apply it once on each and every W9x machine. To get CP back for administrative purpose, use admin's login script.

I would also recommend you to read the following "Windows 98 Professional Reference" link: http://library.cs.tuiasi.ro/win32/windows_98_professional_reference/

See Chapters 8 & 23 to be clear with what you're trying to achieve and what is the 9x limitation.

If you have any questions regarding NT-domains, don't hesitate to ask me.

Good luck!

by maxwell edison

Using the System Policy Editor, you can create or edit system policies. System policies allow you to increase control and manageability of computers across the network without needing to use a 32-bit, protected-mode client. Computer settings in system policies prevent users from modifying the hardware and environment settings for the operating system, ensuring that Windows 95 starts up in a predicatble way. You can set options to restrict access to computer-specific system and network features using system policies.

See this link:

http://www.microsoft.com/windows95/downloads/contents/WUAdminTools/S_WUManagementTools/W95PolicyEditor/Default.asp

(REMOVE SPACES from the pasted URL.)

Maxwell

This discussion is closed to new replies.