[Samba] ntconfig.pol (was w2k sp2 + ntconfig.pol)

[Con Harte]

Torsten,

If the option is greyed out in Poledit it means that the modification
will not take place.  You need to ensure that it is checked so that each
machine sets itself to pick up the new policy.

That being said, now these machines will not even check for the existence
of it.  To force them to do so you have to either
   a) manually modify every machine's registry preferably using poledit
      and connect to Registry on Remote computer (may be worded differently)
or
   b) create a .REG file with the key to be modified (obtain this info
      from the .INF file that poledit uses) and then run regedit with this
      file, possibly from a logon script containing "regedit getpol.reg", as
      this will save a lot of time if you have many machines to update.

Once all machines are successfully picking up the new policy with the
Automatic Update option configured then you can grey it out in the policy,
but honestly it's not worth it.

Hope that fixes your difficulty.

Roland,

The "ntconfig.pol" is the standard name for the policy enforcement
on Windows NT.  Windows 2000 is Windows NT at it's heart, and so
uses this file.  The Policy Editor options that get put into this
file are slightly different between NT4 and W2K, but many options
are common.

By the way, what does GPO stand for?


Cheers,
Con.
At 10:58 27/06/02, you wrote:
>On Thursday 27 June 2002 11:37, Roland Schmid wrote:
> > Hello,
> >
> > I did not follow your thread but I'm a bit wondering why you try to
> > apply the ntconfig.pol on W2K.
> > This GPO only works on the old NT 4.0 machines and clients.
>
>That's not true - as far as I can tell... It does get applied now.. and we
>only have w2k workstations.
>--
>Torsten
>
>--
>To unsubscribe from this list go to the following URL and read the
>instructions:  http://lists.samba.org/mailman/listinfo/samba