Page 1 of 4 123 ... LastLast
Results 1 to 15 of 53
  1. #1
    Star Lounger Techie's Avatar
    Join Date
    Dec 2009
    Location
    Philadelphia, PA, USA
    Posts
    62
    Thanks
    9
    Thanked 0 Times in 0 Posts
    I am looking for a basic tutorial on Group Policy. I am running Active Directory and running Windows Server 2003 Standard Edition.

    Here are a few requirements:

    1) I need an example that I can test in my production environment, as I don't have a dedicated testing server. So in any posting, please include instructions for how to apply the group policy test to affect just my computer name, or just my account.

    2) Please look at previous posts of mine and try and write out the instuctions with lots of spacing, and clear instuctions on where to find the options to adjust.

    3) If you don't write up a solution yourself, but link to a solution, please give a short intro to the solution here.



    Thanks,
    Peter
    (A one-man support team for a small nonprofit. This means everyone in this forum is my best option for help and system support, and that I don't have dedicated testing boxes.)
    Link to help files I have written: Techpraise.com
    Peter
    Support for a large nonprofit
    Projects

  2. #2
    Lounger
    Join Date
    Dec 2009
    Location
    Dallas, Texas, USA
    Posts
    37
    Thanks
    0
    Thanked 2 Times in 2 Posts
    Before you get any other suggestions, I suggest you do this first:

    1. Create a Test OU
    2. Create a user in the Test OU
    3. Create your group policies applied to that OU--this is the safest way to test things without a separate environment.

  3. #3
    WS Lounge VIP
    Join Date
    Dec 2009
    Location
    Earth
    Posts
    8,191
    Thanks
    48
    Thanked 985 Times in 915 Posts
    Group policy has 2 parts, machine policy and user policy.
    Machine policy is applied as the machine is starting Windows and before the login prompt.
    User policy is applied immediately after login.

    Group policy is only a text file with instructions for Windows. This text file can have NFTS permissions applied to limit it's application to particular machines/users/groups. The permissions should only be set with the group policy editor.

    Group policy is always applied to an OU and from there it can be filtered for individual machines, users or groups. This allows you to set different policy for work stations, servers, robots etc.

    Be vigilant when editing a group policy object as there is no undo option.

    Start by installing the group policy management console. This gives a clear simple view of your GP.
    Now create a new group policy object under Group Policy Objects. Always start the name with "TEST" until you have tested the policy and want to move it into production. e.g. "TEST - Run Notepad at startup".
    Now edit the GPO and navigate through User, Windows, Startup Scripts.
    Add an item for "notepad.exe".
    Close the GPO.
    Remove "Authorised Users" from the security section and add your name instead.
    Right click on the OU that contains your user name and select apply existing GPO.
    Select the GPO you just created.

    Now when you logon to any PC, Notepad will run.

    Note: Most of this is off the top of my head from home, so some of the names/sections may not be correct.

    cheers, Paul

  4. #4
    Star Lounger Techie's Avatar
    Join Date
    Dec 2009
    Location
    Philadelphia, PA, USA
    Posts
    62
    Thanks
    9
    Thanked 0 Times in 0 Posts
    Hi Paul,

    I tried what you said in the notebook example, but nothing happened when I logged out and logged back in. I tried it on both my Windows Vista PC, and a Windows XP machine in the office.

    Please see the attached Word file with screen shots of how it set it up.

    Help from anyone troubleshooting why it didn't work is appreciated.

    Thanks,
    Peter

    Quote Originally Posted by P T View Post
    Group policy has 2 parts, machine policy and user policy.
    Machine policy is applied as the machine is starting Windows and before the login prompt.
    User policy is applied immediately after login.


    Group policy is only a text file with instructions for Windows. This text file can have NFTS permissions applied to limit it's application to particular machines/users/groups. The permissions should only be set with the group policy editor.

    Group policy is always applied to an OU and from there it can be filtered for individual machines, users or groups. This allows you to set different policy for work stations, servers, robots etc.

    Be vigilant when editing a group policy object as there is no undo option.

    Start by installing the group policy management console. This gives a clear simple view of your GP.
    Now create a new group policy object under Group Policy Objects. Always start the name with "TEST" until you have tested the policy and want to move it into production. e.g. "TEST - Run Notepad at startup".
    Now edit the GPO and navigate through User, Windows, Startup Scripts.
    Add an item for "notepad.exe".
    Close the GPO.
    Remove "Authorised Users" from the security section and add your name instead.
    Right click on the OU that contains your user name and select apply existing GPO.
    Select the GPO you just created.

    Now when you logon to any PC, Notepad will run.

    Note: Most of this is off the top of my head from home, so some of the names/sections may not be correct.

    cheers, Paul
    Attached Files Attached Files
    Peter
    Support for a large nonprofit
    Projects

  5. #5
    WS Lounge VIP
    Join Date
    Dec 2009
    Location
    Earth
    Posts
    8,191
    Thanks
    48
    Thanked 985 Times in 915 Posts
    You haven't linked the GPO to an OU. See Erics note about creating a test OU above.

    cheers, Paul

  6. #6
    Star Lounger Techie's Avatar
    Join Date
    Dec 2009
    Location
    Philadelphia, PA, USA
    Posts
    62
    Thanks
    9
    Thanked 0 Times in 0 Posts
    Hi Paul,
    I linked my Test Group Policy to a new Test OU, but notepad isn't opening when I log out and log back in.

    Can you please take a close look at my new attached screenshots?
    I run my Domain Controller on Windows Server 2003 SP1, and the PC I am testing the User Policy on runs Windows Vista.

    Thanks.


    Quote Originally Posted by P T View Post
    You haven't linked the GPO to an OU. See Erics note about creating a test OU above.

    cheers, Paul
    Peter
    Support for a large nonprofit
    Projects

  7. #7
    Lounger
    Join Date
    Dec 2009
    Location
    Dallas, Texas, USA
    Posts
    37
    Thanks
    0
    Thanked 2 Times in 2 Posts
    Quote Originally Posted by Peter Z View Post
    Hi Paul,
    I linked my Test Group Policy to a new Test OU, but notepad isn't opening when I log out and log back in.

    Can you please take a close look at my new attached screenshots?
    I run my Domain Controller on Windows Server 2003 SP1, and the PC I am testing the User Policy on runs Windows Vista.

    Thanks.
    Did you check task manager? Notepad should be running under the SYSTEM user, so you won't see it.

  8. #8
    Lounger
    Join Date
    Dec 2009
    Location
    Dallas, Texas, USA
    Posts
    37
    Thanks
    0
    Thanked 2 Times in 2 Posts
    Quote Originally Posted by Peter Z View Post
    Hi Paul,
    I linked my Test Group Policy to a new Test OU, but notepad isn't opening when I log out and log back in.

    Can you please take a close look at my new attached screenshots?
    I run my Domain Controller on Windows Server 2003 SP1, and the PC I am testing the User Policy on runs Windows Vista.

    Thanks.
    Did you check task manager? Notepad should be running under the SYSTEM user, so you won't see it.

  9. #9
    Lounger
    Join Date
    Dec 2009
    Location
    Dallas, Texas, USA
    Posts
    37
    Thanks
    0
    Thanked 2 Times in 2 Posts
    Quote Originally Posted by Peter Z View Post
    Hi Paul,
    I linked my Test Group Policy to a new Test OU, but notepad isn't opening when I log out and log back in.

    Can you please take a close look at my new attached screenshots?
    I run my Domain Controller on Windows Server 2003 SP1, and the PC I am testing the User Policy on runs Windows Vista.

    Thanks.
    Did you check task manager? Notepad should be running under the SYSTEM user, so you won't see it.

  10. #10
    Lounger
    Join Date
    Dec 2009
    Location
    Dallas, Texas, USA
    Posts
    37
    Thanks
    0
    Thanked 2 Times in 2 Posts
    Quote Originally Posted by Peter Z View Post
    Hi Paul,
    I linked my Test Group Policy to a new Test OU, but notepad isn't opening when I log out and log back in.

    Can you please take a close look at my new attached screenshots?
    I run my Domain Controller on Windows Server 2003 SP1, and the PC I am testing the User Policy on runs Windows Vista.

    Thanks.
    Did you check task manager? Notepad should be running under the SYSTEM user, so you won't see it.

  11. #11
    Lounger
    Join Date
    Dec 2009
    Location
    Dallas, Texas, USA
    Posts
    37
    Thanks
    0
    Thanked 2 Times in 2 Posts
    Quote Originally Posted by Peter Z View Post
    Hi Paul,
    I linked my Test Group Policy to a new Test OU, but notepad isn't opening when I log out and log back in.

    Can you please take a close look at my new attached screenshots?
    I run my Domain Controller on Windows Server 2003 SP1, and the PC I am testing the User Policy on runs Windows Vista.

    Thanks.
    Did you check task manager? Notepad should be running under the SYSTEM user, so you won't see it.

  12. #12
    Lounger
    Join Date
    Dec 2009
    Location
    Dallas, Texas, USA
    Posts
    37
    Thanks
    0
    Thanked 2 Times in 2 Posts
    Quote Originally Posted by Peter Z View Post
    Hi Paul,
    I linked my Test Group Policy to a new Test OU, but notepad isn't opening when I log out and log back in.

    Can you please take a close look at my new attached screenshots?
    I run my Domain Controller on Windows Server 2003 SP1, and the PC I am testing the User Policy on runs Windows Vista.

    Thanks.
    Did you check task manager? Notepad should be running under the SYSTEM user, so you won't see it.

  13. #13
    Lounger
    Join Date
    Dec 2009
    Location
    Dallas, Texas, USA
    Posts
    37
    Thanks
    0
    Thanked 2 Times in 2 Posts
    Quote Originally Posted by Peter Z View Post
    Hi Paul,
    I linked my Test Group Policy to a new Test OU, but notepad isn't opening when I log out and log back in.

    Can you please take a close look at my new attached screenshots?
    I run my Domain Controller on Windows Server 2003 SP1, and the PC I am testing the User Policy on runs Windows Vista.

    Thanks.
    Did you check task manager? Notepad should be running under the SYSTEM user, so you won't see it.

  14. #14
    Lounger
    Join Date
    Dec 2009
    Location
    Dallas, Texas, USA
    Posts
    37
    Thanks
    0
    Thanked 2 Times in 2 Posts
    Quote Originally Posted by Peter Z View Post
    Hi Paul,
    I linked my Test Group Policy to a new Test OU, but notepad isn't opening when I log out and log back in.

    Can you please take a close look at my new attached screenshots?
    I run my Domain Controller on Windows Server 2003 SP1, and the PC I am testing the User Policy on runs Windows Vista.

    Thanks.
    Did you check task manager? Notepad should be running under the SYSTEM user, so you won't see it.

  15. #15
    WS Lounge VIP
    Join Date
    Dec 2009
    Location
    Earth
    Posts
    8,191
    Thanks
    48
    Thanked 985 Times in 915 Posts
    Oops! Should have mentioned that bit

    cheers, Paul

Page 1 of 4 123 ... LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •