General discussion


W2K Group Policy and Windows 98 clients

By netadmin ·
If I deploy Active Directory Group Policy within my LAN, is there any possible way for Windows 98 clients to read it? If not, is it possible to take away a Windows98 user's ability to Add/Remove programs?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by erikdr In reply to W2K Group Policy and Wind ...

a) No, they cannot read GPO. Win98 uses the old CONFIG.POL system, even when you install the Active Directory Client on W98.
b) They can only be restricted to what CONFIG.POL allows. As far as I remember it _can_ lock out the Add/Remove Programs option of Control Panel and the Adding shortcuts to desktop, and the Run command and the commandline.
That goes _some_ way to preventing the users from installing programs, but definitely not far enough. The fact that W98 has no ACL's or similar security mechanisms will always allow power users to install software locally. There is some 3rd party stuff around making it even more difficult but again that can be bypassed, because W98 was simply not designed as an OS which could be locked down...

Hope thiz helpz a bit,

<Erik> - The Netherlandz

Collapse -

by jeaster In reply to W2K Group Policy and Wind ...

Group Policy will not deploy to machines that are Pre-Win 2000. However, you can use System Policies to "lockdown" windows 98 machines. System Policy editor is part of the Win98 resource Kit I believe, and I think is also on the Win98 CD.

Related Discussions

Related Forums