I found out the hard way that you cannot use loopback mode and group
filtering together, when the filtering is based on a group with computer
objects, and you intend to carry over both the user+machine sections.
It will filter out the user section (even though loopback is enabled) ...

I am trying to change the IE settings for users logging in to a 2003
machine.  I have changed the group policy locally and the settings are
applying just fine to local users, but when a domain user logs in the
settings are not applied.  Seems like a simple thing, but a quick

Our computers are joined to the domain and we let domain users to logon
interactively to the domain computers. However, when they are logged on,
they are not able to run windows updates or install software. Does anyone
know how to allow domain users to have administrative rights ...

Is there anyway in Windows 2003 server Group Policy, to make Windows
Firewall, in Windows XP SP2, trust an entire subnet?
Thanks!
I know this is not preferred, but I like to know how...

I have a Group Policy Template that I've been using to add a registry
setting for SMS, I've recently been asked to deploy a new registry setting
to all of our desktops for our heat application.  I've included the entire
Group Policy .ADM file below.  The registry setting I'm ...

We have a Windows Server 2003 domain environment with a Enterprise Root CA
installed. Clients are Windows XP Pro. Some of our apps use client
certificates for user identification and today the users go to the
certificate enrollment website that is installed on the CA server to

Where can I find official documentation of adm file. (keywords, stucture and
etc) ?
thanks
Vilius

Has anyone tried to use an alias for redirected folders/offline files? I
would like to use an alias just in case the name of the server changes in the
future or if we have to move redirected data to a new location.

I have a GPO for installing a custom app that is assigned to a group of PCs.
If I create an upgrade to that app in the GPO, what will happen to new PCs?.
Will they just get the upgrade or will they first get the original  and then
the upgrade on top.

I have 2 x W2003 SP1 servers in an OU
3  GPO's are being applied to that OU - inheritance is blocked and there are
no GPO overrides affecting the OU
All was working fine with the GPO settings affecting both servers  - but

The windows 2003 Server Administrator Resource Kit allows people to establish
a remote Desktop connection to the console of a machine. The problem I have
is that since it is a console session, it doesn't time out like a normal RDP
session, So my Admins who don't logout, lockout ...

Is there any tool that can be used to document changes that have
been made in a policy?
Sandy

I have a new forest setup on a new server.  I am using the Group Policy
Management Console for Windows Server 2003 SP2 Standard.
I have settings for the default domain policy setup and working fine.  At
least some settings like the IE 7 browser title are applying - so far so good.

First let me explain the AD setup: I have two OU's with about 300 Windows XP
SP2 computers in each.  I only have admin of the two OU's and I am trying to
install software using AD.  I tried a simple install of Adobe reader 7.07.  I
set the permissions for me for testing.  When I ...

In Group Policy, can someone explain to me the difference between Enforced
and Link Enabled?  Do both of them have to be set to Yes in order for your
group policy to take affect?  I create a GPO, and by default, Link Enabled is
set to yes and Enforced is set to no.  In order for ...