I heard an opinion GPO with application settings are useless with
roaming profiles since GPO settings are getting overwritten by the
roaming profile.
Is this true.?

I would like to change the default passowrd complexity rules. I would like to
change the GPO to make my password as follows:
7 Char.
Alpha

I have an MSI file which is located on a shared directory on the server.
Using Active Directory Users I created a new GPO to allow users to install
the software.
I chose the Publish option as I only want the software installed by those

just discovered i cant get into my gpo's or local domain policy, domain
controller policy etc, to my knowledge me or no-one else have ever configured
the gpo so i dont know why the admins group had been denied access, i
followed the microsoft help and reset all the gpo's back to ...

Is there a way to print out all group policies in Windows XP Pro

I have a group of server administrators that I am trying to give "almost"
administrator rights to domain controllers.  But I do not want to give them
rights to the directory.  If I add them to the local administrators group of
the domain controllers they get access to the server ...

I have searched high and low and maybe because the current batch of
this morning's coffee is so incredibly weak I'm just not doing a good
enough job, but I can't seem to locate any directions for blocking auto
login on our domain through GP.  Is this possible? Do I need to create

I want to have Prohibit Access to Control Panel but allow changing of the
date and time by double clicking the time in the system notification area. I
know I can enable and disable anything on the control panel but I do not want
to enable the control panel at all.

My servers sit behind a firewall and all my workinstations are out in
the field so to speak. I can log into the server and map drives and
junk just fine. MY policies dont work at all unless i put them on the
lan where the servers are. This goes for both user and comptuer policy.

How to restrict CMD.EXE and taskmgr.exe through GPO in windows 2000

Setup :
Novell 65 file and print, primary login
2k3 AD, secondary login
Most apps are done through Zenworks 4 to users.

Setup folder Redirection for 4 users in a 30 user office Windows 2003 servers
and XP Pro Workstations.  All seemed to go well except that the only folders
created were Application Data and Desktop.  My Documents and Startup were not
created.  I checked the configuration carefully ...

Apart from MS default and their publised security guide,  is there any web
site with proven security templates available for download.  I'm looking at
the inf for WinXP Pro workstations and Win2k3 (as DC, member server and
those other server roles like IIS server etc)?

Hi all, i wont to introduce folder redirection for my users, today i'm do
test and found that synchronization process not create offline copy mdb
files, why? can i contol this behavior?
I'm use Windows 2003 server, Windows XP on client machine and redirect My

I have the following
- SBS 2003
- ou with computers with a lot of permissions (comp_perm)
- ou with computers with a lot of restrictions (comp_restr)