We are in the process of applying group policies to set the screen saver time
out period and to require a screen saver password on all of our workstations.
We are NOT setting a specific screen saver - we want our users to be able to
choose their own. The problem with this is that ...

I've created a small GPO. In this GPO I defined a logon script which should
add an registry key to a client computer. - 2 Keys in HKLM and 2 Keys HKCU.
So, the problem is now that the user get's access denied messages because he
isn't local administrator of his client.

SBS2003 server, XP Pro SP2 clients
Hi,
I would like to give some users restricted access to Internet and some
users complete Internet access. The restricted access would contain only a

I'm looking for a group policy setting that will allow me to control
Tools->Internet Options->General->Temporary Internet Files->Settings.  I want
to change the options to check for newer versions of stored pages to every
time I visit the page.  Is there a policy available that ...

I'm fairly new to group policy.  I understand how it works and what it does,
but haven't really created one for our domain yet.  Are there some docs out
there that gives examples of what should be used in different kinds of
environments?  

Is it possible to Delete internet history with GPO? I can disable access to
internet history but old urls are still shown i Address bar.
Tomppa

Hi!  We have a case where the registry key below gets changed from a value
of zero to 102.  I'm pretty sure this is GP because it happens to every
computer, including the server, after rebooted.  We can go in and set the
value to zero, but when rebooted, it gets changed.

Running "gpupdate" or "gpupdate /force" works fine for refreshing policy
defined in AD on a domain pc, but how can you force a refresh when changes
are made to the Local Computer Policy on a workgroup pc?
If I type "gpedit.msc" from the command line on a workgroup pc and enable a

I want to disable web tool bar in Outlook XP through GP, is this do-able.
Please advise.
Thanks in advance!!

I made a file called "usb.adm" and add it to new GP called "USB disable".
The problem is, when I edit the policy with GPMC on my PC with WinXP SP1
installed it shows only a Category but no Policy in it....but when i open it
in my PDC W2KSP4server station everything seem OK.

Added the MS Office, Word, Excel things, but I think now my logins are
too slow.  Can I remove these?
Suggestions?
Thanks

For start I can describe my environment:
One domain with two DC:s, one Windows Server 2003 SP1, one Windows Server
2000 SP4. Domain is in 2000 Native mode - all GPO:s are always edited from
Windows 2003 server and all .adm templates are updated on both servers.

I am running 2003 dc's in 2000 native mode.
I have a local account called User1 on my workstations. It might have a
different SID on each workstation but is always called User1.
Is there a way to assign this account to a user right in a domain group

Going nuts over here...
Running 2k3 server/AD, set GPO for Workstations to require 5 minimum
characters for passwords.  I log into a test workstation, check the GP
settings, and the GPO has taken effect.  Minimum character setting is present.

- I  have a Windows server 2003
- Windows 2000 Clients
- Windows XP clients
- Windows XP Pro Clients