Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Policy Editor???

Status
Not open for further replies.

bfletch

MIS
May 3, 2000
167
US
Can someone help me with policy editor. I am assuming it is used in order to keep all your workstation desktop uniform and not allowing the operators in the configuration like the control panel, hide network drives, etc. I have messed with it in setting up profiles but what is the difference with user and computer? Where do you put the policy, on the individual computers? Any help would be appreciated. Thanks.
 
It is usually best to operate policies on a system-wide level, unless you are talking about a personal computer that is not attached to a network.

There are 3 options:

1. Computer - affects the computer on which you are editing the policy. Everyone that uses the computer will get the settings you put here, so think carefully. Everyone includes the administrator.

2. User - affects a particular user (as defined in User Manager for Domains). This is great if you are setting up a home PC for different family members.

3. Group (which does not appear by default) - affects a pre-defined group of users. This is extremely useful for corporate networks, and is something I make extensive use of with Citrix MetaFrame.

The policy in an NT4 networked environment is a file held by default on the PDC, and propagated to BDCs via replication.

The location of this file, usually called ntconfig.pol, can be re-defined in the Computer policy.

Note: Every setting you make in a policy file is applied to a users profile, by adding keys to their personal copy of ntuser.dat, which gets loaded as a hive into the system registry.


I hope this information is useful.
 
If my workstations are Windows '98 where would the policies be stored?
 
Uh-oh.

Windows 9x uses a completely different type of policy files than NT does - and they are not compatible. Win98 has it's own policy editor on the CD, and the policies should be stored (by default) in the NETLOGON share on the PDC (Win9x will only go to the PDC for policy files, unless policy load balancing is enabled - sorry, can't tell you where to do that).
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top