I think I am almost at the point where my security admin is happy with the
way the remote connections to our Terminal Server are setup.  However, he
would like us to REMOVE the "Program" group from the Start menu.  He is
mainly concerned about the use of the Internet Explorer, ...

My security admin wants me to lockdown a Terminal Server session so that the
users can not even see the My Computer, Control Panel, Network Places icon
and even not be able to reboot the Terminal Server.  In fact, what his
ultimate objective is :  lockdown the desktop so that all ...

Hi!
I try to assign application Adobe 8.1 to user configuration and in same time
to remove execting 7.1. Problem is I do not have GPO which installs 7.1 and
for my understanding I have to have it in order to update.

My work place has tones of restrictions regarding Internet access so I
am trying to run a proxy/tunnel server at home and connect from work.
I went to Download.com and downloaded HTTP Tunnel software and ran it
at home. I went to work and tried to change my IE's configuration to

I have blocked wmplayer.exe from running through group policy.  
So start>>programs>>wmplayer
you receive the message
This operation has been cancelled due to restrictions in effect on this

I want to assign computers in an OU to a user class using group policy,
instead of having to run the command "ipconfig /setclassid adapter_name
class_id" on each computer.  I have seen this written up somewhere, but can't
seem to find it

I am trying to create a GPO to allow me to add some sites to both Local
Intranet, and Trusted sites in IE for 1000+ computers.  I am looking at
Computer Configuration->Administrative Templates->Windows
Compunents->Internet Explorer and do not see any entries in there related to

Well let me start of by describing my goals with folder redirection
and offline files
1.    All users will have there My Documents redirected to a folder with
a DFS Namespace based on group membership.

We have a Windows Server 2003 domain running in our environment. We are
slowly adding Windows Vista machines on our domain and noticing some akward
issues. Specifically:-
1. We use a central WSUS 3.0 server to deploy updates to all our

Hi,
I have been looking for a way to stop end users on my network from
installing unwanted software on client PC's. Taking away Local Admin rights
stops programs like Adaware from running as they need Admin rights to run and

Curiously, does "gpudpate" or "gpupdate /force" run logon scripts associated
to the policies?  It seems not too, but I just want to verify.
Thanks,
Brian

I hope there's someone out there that can help...
I want to strip and lockdown the desktop when our users logon to a
terminal services server without it affecting their logon to their
local desktop.

I have finally managed to block access to messenger and live messenger by
using the Path and Hash in the Additional Rules under Software Restriction
Policies.
My problem now is that there are certain websites that also need blocking.

I have a group of users that have laptops and desktops, i want to be able to
set via GP so that any users that logs onto a laptop gets user configuration
settings applied. If i sett user settings and then have the policy apply to a
laptop machine the user settings will not get ...

I was wondering if there was a way via GPO, ADM, or even script, that I could
add an entry to a number of systems existing System PATH.  I know where the
setting is in the registry, but thus far have only found methods to replace
the PATH entry instead of append to it.  I am ...