We are in the process of creating a group policy that will limit user rights
on the desktop.  A major element of our group policy is that it will push
down the local Administrators group, which will contain a domain group for
Network Administrators so that we will have ...

I've set my My Documents redirecting and enabled offline files of My
Documents per Mark Minasi's book "Group Policy, Profiles, and IntelliMirror"
which I love.  He suggest adding Authenticated Users to the users share and
only give them the following

Within the Default Domain Controllers Policy I have the local audit policy
"Audit directory service access" and Audit object access" turned on.
However, it seems like everytime I deploy patches to the servers and reboot
them these two policy settings convert back to the default ...

Hello, I have an inventory WMI scanning program and in order to enable
scanning of clients with enabled firewalls I have set the domain level policy
to allow remote administration in the group policy for Windows firewall.
However, I have noticed that the scanning cannot detect ...

running native mode 2003 AD.
i have created a GPO and linked the GPO to an OU, the settings in this GPO
are user specific settings (not machine settings) some of the users in the OU
that this GPO is linked to log on to servers and other workstations other

The "Security Level" setting in the "Internet Options" is disabled on all my
client workstations. I think it was the Group Policy seeting that disabled
it. Where can i enable the setting in the GP?

This may be a real big question, but,...
I have a user and a computer that I would like to give very specific and
limited access to resources on our domain.
The domain is a Small Business Server 2003 R2, the computer (Windows XP

I have Windows Small Business Server 2003 R2. Would this be the latest (and
most complete) reference for Group Policy objects for this version of
Windows?
http://www.microsoft.com/downloads/details.aspx?familyid=7821C32F-DA15-438D-8E48
-45915CD2BC14&displaylang=en

I am looking for a method using group policy to allow ONLY a certain set
of web sites for a medical practice - approximately 20 work-related.
How would I model this policy and roll it out in our domain for IE?
Thanks in advance,

I have been trying to create a GPO to have IE delete all of the
temporary internet cache ( Temporary Internet Folder)   As of now I
have the .adm file as shown below but am having no success.  Any
ideas?

Somehow the group policy on my 3 networked computers is not permitting
certain actions (e.g., allowing automatic updates from Microsoft) and I am
not able to change it, even though I am the administrator. How do I fix this?

I have set a GPO at domain level. There is one user which i want to exclude
from the effect of the GPO. Can this be done.
i.e GPO is that no-one access the control panel but i want him to be able
to.

I've created a GPO for network ports and another for configuring Windows
update services in group policy.
The GPO doesn't seem to have any effect at all. I've done a gpresult on
my computer and the results are below. The strange thing is it's showing

Is there anyway to push out a regional date setting format to all computers
on the network? As far as I can find, there is no group policy that covers
this.
Thank you in advance,

Hi i want to disable one GPO which is applied to the domain.  Is it possible
to denied the acces for this users for only this gpo
I know we can tell wich group or users have access to it but im dont thinks
i should do a group with all the domain user exept this particuler users.