Group Policy - XP 1

[keepsmilin456]

Windows 2000 - Group Policy

I have installed GPMC SP1 on my XP box (running .net framework). Our server environment is windows 2000 server based with group policy. The new GPMC is great because all of our clients are XP. There are many policies I can set in this new GPMC that I couldn't do in Windows 2000. From my understanding, the new GPMC can only run on Windows XP SP1 w/ .net or Windows 2003 server. I have launched the GPMC on my PC (running XP SP1 w/ .net) When I connect to my domain's GP, I am unable to see the new GP's...only the ones that were already there. However, when I connect to my local computer, I am able to view all the new GP's for XP.

So I'm assuming this new GPMC SP1 is only used as a management console from an XP box...if you want to use the new policies, you would have to build a new windows 2003 server box with the new GPMC? Right?

 

[markdmac]

You are correct. You can use the GPMC to configure your local policy and see all the neat new stuff, but as soon as you connect up to your Win2K network it sees that AD has not been expanded and will only show what can be configured currently.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[tfg13]

As well as, you will notice that there are some "extra's" within the XP policies that are not on the 2000 AD policies. For example, Software restriction policies. You will not see these in the 2000 AD due to 2000 AD not supporting these policies. In other words, if you would like to have some of the nice additional policies you can set via domain, you will need to upgrade to 2003.

 

[markdmac]

Just one extra point for the record, it is possible to add additional policies to be configured with 2000 Active Directory. You just need to create your own ADM files and then click View, Filtering and then clear the box next to Only Show Policies that can be Fully Managed.

So if there are specific XP settings you want to set, if you can identify the registry settings for them you WILL be able to add them to AD.

Here is an example for you that I did for another forum user a few weeks back. this sgives youthe option to set the system clock to military time. Save this to a text file and call it timeformat.adm. Open your GPO, right click Administrative templates and click ADD. Navigate to the file you create and save it. Clear the filtering as described above and you will be able to see the setting. Test it on a test box and you will see that it works like a charm.

CLASS USER
CATEGORY "Time Settings"
   POLICY !!SelectMilitaryTimeFormat
	   KEYNAME "Control Panel\International"
	   VALUENAME "sTimeFormat"
	   VALUEON "HH:mm:ss"
	   VALUEOFF "h:mm:ss tt"
   END POLICY
END CATEGORY


[strings]
SelectMilitaryTimeFormat = "Use Military Time Format 24:00:00"

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[keepsmilin456]

Damn...that blows.

It sucks when all of your clients are XP and server is 2000. I heard upgrading to 2k3 can be a bi&!h! We are planning on hiring a consultant later down the road to do this...

I'm attempting to push out software via GP, but the clients are getting an error messages in event viewer:

The assignment of application Microsoft Plus! for
Windows XP from policy install xp plus failed. The error
was : The group policy framework should call the
extension in the synchronous foreground policy refresh

&

The system cannot find the file specified.

I know you can fix this by the new GPMC by turning this on:
Always wait for the network at computer startup and logon

But don't have 2k3 yet! You guys know how I can disable this on the client side?

Thanks!

 

[markdmac]

Do you have an MSI that you are pushing out? If you have set it as a published app then you should be OK. Just be certain to set UNC paths instead of drive letters when you specify where to find the file in GP.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[tfg13]

I'm with markdmac. Make sure you are using the full UNC path instead of Drive letters.

 

[keepsmilin456]

I will try published this time. I have been trying assigned and getting errors. And yes, I am aware of the UNC path!!...have read many many posts about that!

Thanks guys...I'll let you know what happens...

 

[keepsmilin456]

Published worked...although, I would like to have the software installed, instead of having the user install it themselves using Add New Programs...because we all know users do not listen!...so i guess the only way to go is 2k3 if i want an assigned app...

 

[markdmac]

OK, so now we know your MSI is definately good. Take a look at my FAQ for deploying MSOFFICE in this forum and see if it helps you get the software pushed down at bootup.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark