I have some security settings for IE enabled in my local group policies for an system image.

They restrict access to:

Internet Options
Disables Tabs in Internet Options



A manager who is above me wants the users now to have access to changing their home page. Is there a batch file or reg hack that makes it possible to reverse a given Group Policy?

I think that question is better asked in the microsoft.public.win2000.active_directory newsgroup
But for an uneducated guess, you might want to look into using Block Policy Inheritance on your OU's.
And it's (to my knowledge) always possible to simply un-check the relevant rules in the Policy Editor to reverse the settings, since they will take effect the next time the client machine logs into the domain. You can also force an immediate policy refresh by using Start|Run|GPupdate on the domain controller.

I wonder if my question fits in this thread...

I am running a Samba server with 6 XP clients.
The problem I am having is to change the Group Policy for the clients.
Is there a way to make changes in gpedit of 1 PC then distribute it to the other 5 clients?

I thought of something like the \\servername\netlogon\Default User in roaming profiles where a new user get a copy of a profile upon his/her first logon attempt... any ideas?

Thanks in advance
~WiLL~

if your samba server is running as a domain controler than yes you can just simply save the .pol file as ntconfig.pol in your netlogon folder of your samba domain controler then every time the XP clients logon to the domain the group policy will be updated on that machine

hope this has helped

Since you linked to the 2k site, you'll note that "secedit /refreshpolicy" is used to update the policy...they changed it to gpupdate with 2k3.

Thanks for that. i'll add it to my notes. Haven't got 2003 to verify however so i'll take your word for it. and now i'm not sure whether I tried gpupdate on 2000 or not, I seem to recall I have. ah well. and microsoft.public.* is a usenet newsgroup server by the way, not sure what you meant by '2k site' unless I misread.

Thanks for the reply berrance
Yup, my samba is set as PDC.
I have been googling on this group policy subject for a few weeks (.pol, poledit.exe, regedt32.exe).
I can't find the poledit.exe anywhere in my XP, so how do i save my configs?
Also, where is this .pol file located? I saw a similar hidden file when i was loading my Custom Default User's ntuser.dat into the registry hive for modification.

I tried running mmc, include some snap-ins, did some settings, then saved it as console.msc, copied it to another PC only to find out that the console window is copied but not the contents!

The method you've mentioned, does it update the whole group policy (including Local Machine) or just the Current User settings?
Read some articles saying that HKCM files are stored in \windows\system32\config and I have to manually copy the contents of that folder and put it to each and every PC. Then there are .adm files in \windows\system32\GroupPolicy. Are these files related to my problem?

The samba manual is a bit brief on this topic...

Poledit no longer exists. Use gpedit.msc

You can pm me any questions windows related, if you would like, it reduces them on a linux board, and I'm happy to answer them. Have to put those microsoft certs to use somehow.

Thanks for the response!
pm = personal messaging?
unfortunately i'm not a contributing member here... pm's not allowed...
Will email do?
I reckon there are other users with similar queries as mine in the dark as well, maybe the moderator will allow you to answer it here...

Are the M$ certs exams difficult? planning to get one myself, maybe redhat's or cisco's

No MS certs are fairly easy, 2k3 was harder, but for that I'm grateful. Too many people with certs. So far AIX was hardest. Followed by cisco.

email.

williamwbishop@gmail.com

Oh... thanks for the info! Also for the email
AIX?
Does it make a difference having certs when applying for jobs? What other Linux certs are there besides the one offered by Redhat?

AIX is unix by IBM. Not a really in demand cert. And certs get you in the door, they get you past human resources who don't know anything about computers. They won't get you past the interview process. Mine was tough, I had a guy in the group that actually went into manuals looking for questions that no one would know. I still got them though. I love manuals.

Thanks for the extended info!

Well, at least those certs gets you pass the 1st phase
Yeah! My mate told me that his interview with an electronic company didn't go well because his interviewer dug out questions about transistors and flip-flops!

Manuals are long-winded and kinda boring at times... but there's where most people missed out important info! I've been reading manuals since i started linux early this year

It's great getting to know LQ people, so much info! Cheers~

i emailed you will