Is there a way to use GPO in a MS 2003 environment, to prevent a remote
Domain PC running the XP-pro MS VPN client, from caching the logged on users
name and password?
What I would like to do is help prevent "household members" from activating

Can you turn "remote desktop" on through group policy?

I’m trying to turn off  fast logon on my XP machines so we can run software
updates using GPs.  I have imported a Win XP system.adm into my DC’s
Administrative Template.  However, now whenever I try an open the System tree
I receive Dcom truncation errors, is there anyway I can ...

I downloaded them from Microsoft, to install on a 2003 server DC.
But when I add them through GPedit, I get a whole string of errors.
For example: Error 51.  Unexpected keyword.
Found: #IF

Greetings All,
We are in an academic environment and need to make sql enterprise manager
available to students. However, we are using Group Policy to restrict mmc
snap-ins and I don't see the enterprise manager in the list of

We currently have a gpo wich starts a password protected screensaver.
This also disables all controls on the screen saver Tab in the
configuration panel. This OK for most users but i want to allow some
sales guys to turn off there screen during presentations. So ideal

I am trying to figure out how to get IE proxy settings to apply
conditionally via group policy to users depending upon where they are.
Basically, I want users in the office to use a proxy server when they
are here, but not to use a proxy server at all when they are out of the

I use gpmc.msc to edit a GPO. In few hours I'll lose all the changes I have
made and the settings will return to the default values. I'm running Windows
2003 DCs in Windows 2000 Native Mode.
What I have to do to keep these changes from disappearing?

I'm having trouble preventing a user who is logged into the Guest account on
my WinXP Pro SP2 machine from running regedit.  Enabling "Prevent access to
registry editing tools" with gpedit.msc doesn't seem to do it (it does seem
to prevent other users from running regedit, ...

Do a Google search using both these phrases "local policy setting" "effective
policy setting".  You will find several references that say BOTH boxes must
be checked to make an application work.  One reference is to Microsoft's KB
article 301248, and here is an excerpt from it:

Dear ....
I am using 2003 server and xp sp2 clients. I have users in an OU. I've
applied some GP settings on that OU (by right clicking OU, Group Policy Tab,
and creating New GP.

Is there any way to prevent users - preferably by GPOs -
from creating documents on their XP desktops, except for
the shortcuts ?
Thanks

Background:
Domain Controller = Windows 2003 Standard called 'Server-A'
File and Print Server = Windows 2003 Server (2 node cluster) called
'Server-B'

We have a Win 2000 Advanced Server based domain. In this domain we have
also several Windows XP computers. Now I'd like to set the "Allow logon
through Terminal Services" right via Domain Security Policy. But it's
not available because the right is not available in the Doamin ...

I would like to limit the number of Admins on a memberserver. I still need
these people to be able to stop and start services on those servers, as well
as reboot the servers. Are there any settings with group policy that would
allow me to accomplish this. I've look at the System ...