How do I configure The group policy or whatever, so that it blocks certain
programs for certain groups? The programs are standards like: Microsoft
Office and Openoffice...
Greatful for reply

I'd like to create a GPO and apply to a GROUP and have the GPO only allow
those USERS to logon to a certain pc on our network.
It's a generic account to allow anyone to check their mail, etc. on a public
pc, but some employees go to basically any pc in the WIN 2003 domain and

Is there a group policy that can set a users default gateway and DNS servers?
I know we can do this with a DNS server but we require static IP addresses.
I have been searching on this question without any results.
Thank you, Troy.

I have a GP written to redirect my users desktop to a file share on my
network.  The files are being redirected fine and they also show as being
Offline files.  The problem I am having is if I delete one of those files
off my desktop, it is not placing the file in the recycle bin ...

I am working on creating a shutdown GPO to do various things for my servers
when I reboot them.
If I log on and initiate a reboot from the console the GPO runs great.
The problem is when I use a remote command such as shutdown.exe or a WMI

I am trying to change some parameters on my gpo but it says inaccessible
because you dont have read permission. Any ideia how to change it back??
One other thing is that for some reason I can not install printers? I have
windows 2000 DC and a windows 2003 DC.

Is there a GPO that would prevent users from getting on the internet? I'd
like to only allow them to get to our LAN Intranet? I'd be creating it on
our WIN 2003 PDC and the client is running XP.

I apologize for such a vague posting, but I'm in a wierd situation.  Per my
boss, he wants to implement "a general basic group policy implementation".
"Nothing to granular or complex".  This is for our desktops.  I truly don't
know where to begin simply because there are like ...

Windows cannot access the file gpt.ini for GPO
CN={31B2F340-016D-11D2-945F-00C04FB984F9}
,CN=Policies,CN=System,DC=nmspace,DC=net. The file must be present at
the location

I am trying to prevent a select number of PCs to not have the PROGRAMS menu
under the start button to not be there, I have tried doing a number of things
through group policy and I can't seem to do it. Can someone tell me how to do
this?

I need to ensure that a group policy applied at the site level is NOT
applied to the member servers in that site (the DC were easy to exclude).. I
know I should be able to do that with WMI filtering but I never worked with
that! Can anybody tell me how that works? If I had a filter ...

I'm attempting to turn off 'Read all properties' on an OU to essentially
hide it from users.  This works great in all aspects of AD, except when it
comes to GPO's.  For some reason, it appears that this is actually required
for GPO processing.  My test clients will come up with ...

I want to deny user's access to drive C on their local workstations, but
allow access to the same drive when connected to the terminal server --
workstations are all XP Pro and servers are 2003 Std Ed.
I've created a Group Policy Opject that properly restricts access on the

I am trying to determine whether I can apply a local policy on a laptop
so that when it is logged in with a local user, or a domain user in
standalone mode (ie not on the LAN/Domain) then the local policy will
be applied.

Is there a way to alter permissions to a registry key via GPO ?