Either way will be the same result unless you have any service packs and/or hotfixes slip streamed into the cd flat image on the RIS server. If you already have them slip streamed into the image, use that to save the time of downloading and installing them on the pc that you will be imaging.
Did you enable the setting under Active Desktop to prohibit changes? Also, under User Configuration>Adminitrative Templates>Control Panel>Display, enable the policy that prevents changing of wallpaper. It sounds as if your users are just putting the .bmp images back on after you delete them or...
There is a setting in the local group policy and probably in AD for a 2003 domain, that removes cd burning features. It is under User Configuration > Admin templates > Windows Explorer. I'm not sure if this is a setting available in a 2003 domain as we have a 2K domain with some XP pro...
That security tab only sets the permissions for that object (the group). Basically, it determines which users and groups can view the properties of the group and make changes to the group. I'd go with basst's suggestion to logoff/logon and force replication.
If the folder isn't inheriting any NTFS permissions, is the folder shared? If so, does the group or you user have the proper Share permissions (in addition to the NTFS permissions that you set to grant full control)?
Here is another thought, I found this article on MS knowledgebase...
Do you have any permissions (inherited or otherwise) that may be denying your user or the group access? Is the folder shared? Make sure that the share permisions don't prevent you or the group from accessing the folder. "Deny" always overrides any allow permission and when combining share and...
Go to the control panel and open Users and Passwords. Un-check the box for "Users must enter a username and password to use this computer". You can then specify the username and password for the account that you wish to have the machine boot to automatically.
I read in one of the Microsoft texts for Active Directory that issues may arrise when you try to apply a GPO to a machine that has been upgraded to Windows 2000 as opposed to a clean install. The way around this is to open one of the security templates (basicws) and set the policy, then import...
Go to Start>Run>mmc and open an new mmc. Click on Console>Add/Remove Snap-ins. From the list, select Group Policy and choose local machine and click Finish/O.K. Then close the Add/Remove Snap-ins window. From there, you should see Computer Configuration and User Configuration, just expand the...
This may not help now, but for the future, you can also set a GPO to prevent the users from deleting their Temp Internet files and Cookies. Just disable the General tab (Tools>Internet Options). User Configuration>Administrative Templates>Windows Components>Internet Explorer. Also, disable...
You can use group policy (either local or with a GPO in a Windows 2000 Active Directory) to remove Run from the Start menu and disable the command line. You can also disable the messenger service on each machine. If you have a Windows 2000 AD domain, it would be easier to create a GPO and apply...
Make sure you are logged in as the administrator and go to Control Panel>Users and Passwords. On the User's tab, uncheck the box by "Users must enter a username and password to use this computer." The other way to bypass this is during setup of Windows 2000, there is a screen that asks...
Sounds as if the users don't have NTFS or Share rights to access the .bmp file. If your wanting to do this on just one machine, create a GPO for just that machine (log onto that machine and go to Start>Run>mmc) and set the snap-in for group policy for the local machine (default). Copy the .bmp...
Did you set the path for the .bmp wall paper under User Configuration>Administrative Templates>Windows Components>Active Desktop? If so, you have to enable Active Desktop, it is disabled by default. You may also want to enable the policies that prohibit changes to active desktop, allows only...
Have you set the GPO to disable the Messenger Service (mmc: Computer Configuration> Windows Settings>Security Settings>System Services)? If so, are all of your pc's in one OU or spread out to different OU's? If they are all in one OU, apply the GPO to that OU, if not, apply it at the domain or...
If you don't want to mess with the registry, you can also create a group policy object (Start> Run> mmc). Go to User configuration> Administrative Templates> Windows Explorer and you'll find a policy that lets you limit the number of recently used documents that will appear in Start> Documents...
It could be one of two things. First, is you domain a Windows 2000 Active Directory domain? if so, someone with domain/enterprise admin rights may have set the (default) domain Group Policy to allow only domain and enterprise admins to set the system time. This can be found by editing the GPO...
Try this, go to Tools> Internet Options> Connections> LAN settngs or Dial-up settings (whichever applies). Tell the browser to use a proxy server and enter a private IP address (such as 10.1.1.1, that doesn't point to a valild proxy server). Now, you've removed the user's permissions from IE...
Unfortunately, the only way that I've found to prevent searching the internet from the start menu is to remove Search all together. From your mmc, go to User Configuration>Administrative Templates>Windows Components>Start Menu & Taskbar. Set the policy that disables Search on the start menu...
Remove the address bar from the "View" menu. Then create a Group Policy for the local machine (start>run>mmc). Go to User configuration>Administrative Templates>Windows Components>Internet Explorer>Toolbars. Enable the policy "Disable customizing browser toolbars" and no...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.