Can't apply policies to my 98 stations

[FSM]

I need some help here guys, I can't seem to apply my NT policies to my win 98 workstations it works fine with my nt workstations. And I really need to apply them on those pc's, I have really dificult users any suggestions?????<br><br>Thanx !!!<br><br>SMF

 

[computerguy]

Windows 98 does not use the same policy file as NT workstation.&nbsp;&nbsp;You need a separate policy file created using win95/98 policy editor and saving the file as config.pol in the netlogon share.&nbsp;&nbsp;Once you have the file created, you need to enable profiles on the win98 workstations, then it will automatically look for a config.pol file in the netlogon share.&nbsp;&nbsp;When you say you have a policy that works on NT workstation, I assume you used policy editor on your NT server to create the policy file, this file you saved as NTCONFIG.POL<br>I worked in a similar environment where half of the computers were NT workstation and&nbsp;&nbsp;half were Win95.&nbsp;&nbsp;I had two separate policy files to control them.<br>Just a suggestion, hope this helps.

 

[JDurbin]

Hey computerguy do you know a 'How To' setup for Policies like you just talked about available on the web?&nbsp;&nbsp;I hate MS's KB.&nbsp;&nbsp;It's such a #$#@ to find what you want.&nbsp;&nbsp;Thanks in advance. <p>John Durbin<br><a href=mailto: > </a><br><a href=

http://www.brainbench.com/transcript.jsp?pid=699842>Brainbench

Certified Professional VFP Programmer</a><br>ICQ VFP ActiveList #73897253

 

[MasterRacker]

Been busy last few days (which is why I didn't answer your last post )&nbsp;&nbsp;Computerguy is right.&nbsp;&nbsp;You need to use the poledit.exe on your Win98 CD to create the Win98 policies then place the file in the same netlogon share.&nbsp;&nbsp;<br><br>Off the top of my head I don't know how to remotely shutdown a Windows 98 machine.&nbsp;&nbsp;I don't suport any 98 and I never tried to do it to a Win95 machine.<br><br>To log a user off, you do use server manager.&nbsp;&nbsp;Open it up and double click on the server you think the user was authenticated from and click &quot;Users&quot; (If you have more than one domain controller you may have to look at all of them to find the particular since a log on request is processed by which ever DC answers first.)&nbsp;&nbsp;<br><br>Once you find the user you can disconect them. <p> Jeff<br><a href=mailto: masterracker@hotmail.com> masterracker@hotmail.com</a><br><a href= > </a><br> Of all the things I've lost in life, I miss my mind the most ...

 

[FSM]

I guys thanx a lot for the input, but I still can't make it work (the policies)I don't now if the &quot;netlogon&quot; share that I have for default(c:\winnt\system32\repl\import\scripts) will work or do I have to make a new share, if I put the default computer and default user it suposed to apply that policy to very computer in my domain, right?? because is not working not even for my nt workstations. Am I doing something wrong?????<br><br>Thanx alot guys.<br><br>SMF

 

[JDurbin]

SMF,<br>Did you check the MS KnowledgeBase?&nbsp;&nbsp;I'm going to do it and I'll let you know if I find something <p>John Durbin<br><a href=mailto: > </a><br><a href=

http://www.brainbench.com/transcript.jsp?pid=699842>Brainbench

Certified Professional VFP Programmer</a><br>ICQ VFP ActiveList #73897253

 

[computerguy]

I usually base my policy files on groups.&nbsp;&nbsp;I add a group (global group from my NT server) and then apply the restrictions to the group.&nbsp;&nbsp;You should also start by adding the administrator and removing any restrictions so that the administrator has full control where ever you logon, this will prevent you from locking out the administrator on your workstations.&nbsp;&nbsp;I also set a different background and color scheme for the administrator so that i can tell if someone is logged in as the administrator that shouldn't be.&nbsp;&nbsp;If you add groups to your policy, you have to install support for group policies on the workstations.&nbsp;&nbsp;You can tell if it is installed by searching for grouppol.dll file.&nbsp;&nbsp;If it is not installed, use the windows setup tab in the add/remove programs in the control panel.&nbsp;&nbsp;Also make sure you have profiles enabled, this is done through the password applet in control panel.&nbsp;&nbsp;When creating a new policy, I usually start by setting up a test user account on my Nt server, adding that user to the policy file and then making it work for that user.&nbsp;&nbsp;Doing it this way will allow you to make the policy work without interupting the users or locking them out of certyain features that you did not intend to do.&nbsp;&nbsp;Once you have it working and you add your groups, you can give each group a different background color so you will know immediately if the policy is working based on your groups.&nbsp;&nbsp;I'm not aware of any web sites that address this topic, I always find books to be the greatest resource, such as the MCSE study guides.&nbsp;&nbsp;I have the SYBEX MCSE study guide for Windows 95, I found it very helpful with policies.

 

[FSM]

Thanx alot guys, and computer guy that's a very good advice, I will try it and let you know.<br><br>SMF

 

[FSM]

Thanx alot guys especially computerguy, it did work!! I will keep on asking(ha ha)<br><br>thanx!<br><br>SMF<br><br>