HELP ON POLICIES PLEASE ?????

[teza]

I've put in place a restrictive policy that kicks out the display icons options. After serious thought I wish to renable some of the options. When I remove the user from the policy group the restrictions remain. I have waited for replication and still no change.

It appears my only option is to remove the NTUser.dat file in his profile, but that would mean loss of personal settings

Any help, advise or experiences most WELCOME

 

[mcconmw]

Regrettfully, one of the bigger weaknesses with policies is that once they are set on a machine they remain on that machine until another policy overwrites them. If it is just one person, your quickest solution is to create that person an individual policy in you .pol file or to add the user to another group that has the policy that you want them to have. Once you implement policies in an environment, you effectively must give everyone a policy. Otherwise when they log on to a machine they will get whatever policy was applied by the last person to log on. Good luck.

 

[bp1169]

In my tenure as an NT administrator I have never been able to figure out a way of removing the policy without deleting the users profile. I usually rename the profile and they have to go to the server and do a copy portions of the old profile to the new profile (not the .dat file though). Unfortunately you can only copy certain things like shortcuts, etc. Items embedded deep within the guts of nt will have to be recreated, such as outlook mail settings. I hope someone may have found away around this. Hope this helps

 

[mcconmw]

Removing policies is only a matter of writing over them with another policy. To go back to the default computer setup simply create a policy that clears all the settings. Once all the settings are cleared you can use poledit to edit the local registry and set the computer to manually set a .pol that has the default settings set to wide open and no one will get policies on that individual machine again. The better solution is to add the user or a group of users to the .pol file and set their settings to be wide open. Once again, it is effectively all or nothing with policies. Once you add a .pol to hte However, it is not that difficult to create the different groups and users you need to control your environment.