group policy mass update 2

[rizrizza]

Okay, so here's the problem i recently made alot of updates to my group policy setting. Now my question is, do i have to restart every computer on my domain, do a force update on every one of the 300 machines or is there a way i roll out a group policy update from my server to all the machines on my domain at one time so i don't have to go to each machine?

any suggestions?

 

[acl03]

Group policy automatically updates itself every so often (you can set the time, but by default i think it's every couple of hours plus or minus a random interval).

What kinds of settings did you change? Most of these updates will roll themselves out, and certainly all of them will after the clients reboot their machines.

You don't have to touch your workstations when you make group policy changes unless you want the update to happen NOW. Other than that, give it some time and it'll update itself.



Thanks,
Andrew

 

[rizrizza]

yeah i just found that a like 5 min. ago, it wasn't enabled. i changed all sorts of settings since the old admin never configured anything.
i would really like to know how to all out bloack certain sites.

thanks alot, buddy

 

[acl03]

No problem.

i would really like to know how to all out bloack certain sites.

What are you trying to figure out?



Thanks,
Andrew

 

[rizrizza]

is there away i can block a site so it can't be accessed, like say i don't want users to access myspace.com. is there away to block it in group policy?

 

[acl03]

Nope, not in group policy.

You need to do it via your firewall or router.

A simple (not as effective) way to do it is to change your DNS tables to map that site to an internal page that says "Website blocked" or something. But, a user would still be able to get there via the IP address if they know it.



Thanks,
Andrew

 

[rizrizza]

looks like need to find away into the old sonicwall, thanks alot for your help.

 

[tfg13]

There actually is a way to do what you are looking for with Group Policy. You would need to go to a OU policy that the users are members of, and configure:

User configuration->Windows settings->Internet Expolorer Maintenance->Security->Security Zones and Content Rating. You will then be able to add sites to the Restricted Sites tab, and these sites will not longer be able to be visited. I do, however, want to make you aware that you will have to have both the IP and site name in the restriction. This will not work if users use a different browser than IE.

 

[acl03]

tfg13: Good call.



Thanks,
Andrew

 

[tfg13]

The information I just posted is totally incorrect. Please disreguard. You could use it to block downloads, but it will still allow browsing of the site.

Here is a good site explaining:

http://www.mvps.org/winhelp2002/restricted.htm

 

[acl03]

lol....can I take my star back?



Thanks,
Andrew

 

[tfg13]

I kind of wish you could, as it is really embarassing stating it can be done, then I test it, and it still worked. Makes me kind of look bad......

 

[acl03]

Honest mistake.



Thanks,
Andrew

 

[rizrizza]

Thats ok, thanks anyway. i just have to wait untill my CIO remembers the password he set on the sonic wall. It's on a post it some where and he can't find it.