Setting up NT 4.0 System Policies

[hfv]

I want to set up some Group Policies. I have not had any experience with this and am hoping for some tips. I think I am following the correct procedure but they don't seem to work. Here's what I have done so far. Open the policy editor, select options, policy templates and add winnt.adm and common.adm. Then I go to file, new policy then edit, add group and select the gropu. In this case a test group. I set the policy, save the policy as testgroup.pol in the netlogon share. But when I log in as the test user, nothing happens. What am I missing? I have checked the workstations to make sure UpdateMode is on, it is. Help!

 

[ciscogeek]

Make sure your putting your *.POL file into the replication
dir. So that it can be accessed through NETLOGON.

I'm new to policies also, but my biggest problem is trying
to take a user who had the maxium secuirty possible and
downgrading them so that they can access anything. When
I change their access it seems like it doesn't take effect.

Hope this helps !

 

[yizhar]

Hi.

What client OS?
For NT4 clients, save the policy as NTCONFIG.POL in the NETLOGON share
(C:\WINNT\SYSTEM32\REPL\IMPORT\SCRIPTS) on the PDC.
NT4 clients look for this specific file.
For 9x clients it is a different story.

You should read the resource kit and/or other related documents if you want to do it right.
You may look here

http://www.reskit.com

http://www.microsoft.com/technet

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[tmasso]

It's often worth copying anything in C:\WINNT\SYSTEM32\REPL\IMPORT\ to C:\WINNT\SYSTEM32\REPL\EXPORT\ just to ensure that none of your files are overwritten by replication (if you have it running).

Policies can take a while to fully get to grips with, but as long as you've got your policy file in the right place (see previous posts) and got all of the policy templates that you're using in the c:\winnt\inf folder on your DC you should be OK

 

[hfv]

yizhar, client OS is NT 4.0. I am saving my policy file as NTconfig.pol in the correct replication directory i.e. C:\winnt\system32\repl\import\scripts and just to be on the safe side, I am copying it manually to c:\winnt\system32\repl\export\scripts. Have checked to make sure what server is logging my testuser in and it is the pdc.

tmasso, I do have the templates stored in the correct place i.e. c:\winnt\inf.

I am trying to set up a group policy for testing purposes. The test user is a member of the testusers group and the policy (*.POL) file is named the same as the group. That is how I understood it should be set up. Could one of you just list the steps for me so I can verify that I am using the right procedure?