I am going through the admin templates in user configuration of the group
policy editor and removing things such as the run command line etc..
Is there a way for these settings to only affect regular users and not
Administrators?  I would like the run command line to remain when I ...

We need to copy several files from the network to users computers from time
to time.  Then I used bat file of xcopy to apply at log on through group
policy.  Is there a way to copy if users have copied and then do not copy
them again? Also, users complaint that some times they  ...

We had an issue where settings in the GPO security settings got reset to not
being configured.  After we went in and set the configuration we wanted under
the Internet Security Zone, we notice that now, every site we visit even
external Intenet sites, like this site, Google, etc, ...

Hi
I am using Windows Server 2003 with login Administrator I just set some
policy setting in local server by Gpedit
LOcal Computer Policy\Computer Configuration\Windows Settings\Security

Is there a way in group policy to have a USB thumb drive automatically be
mapped to a particular drive letter? I am a network admin at a school and
students come in with presentations on USB devices that need to have their
drive letters changed because it maps to the next ...

Hello,
Several group policies are in place and the majority of PCs on the network
are receiving the following errors. Can anyone help with diagnosing these
errors?

I have an OU containing computers that I want to have automatically logout or
shutdown after a certain period of inactivity.  Can this be done via a GPO?
Windows 2003 servers,  Windows XP Pro workstations

Well, the title says it all - what permissions do GPO's have when they
are applied to the local system and user?  Are they run under the
credentials of that user or do they have higher privileges available,
so modifications made within logon scripts can affect the broader

I know certain policies can only be controlled at the domain level -
am I right in that these are the ones defining password and account
lockout policies?
I appear to be able to define these at ANY OU level.  What's the

Can password policy policy be applied per OU? My understanding was that
password policies can only be set at the domain level and not at OU level.
But if GPO editor allows this, can we have seperate password policy for OU's
like one for HR, another for Legal etc and how efficent ...

I'm trying to set up a kiosk style group policy settings where just about
everything is disabled. I can disable everything via group policy but I can't
seem to find the policy setting to remove everything under "Programs" [i.e.
Accessories, Startup, ..] from being visible. Ideas?

I have a couple batch files that add a registry setting.  They work fine if
run manually.  I tried to place them as a computer statup script and the
settings were not applied to the workstations.  There were no errors at
startup.

I have a group with 100 computers inside.
I have a GPO that installs a software into these 100 computers.
If a new version of this software is released, I update the package
associated to the GPO.

I've created a new custom admx file using the admx editor utility..
i've placed these files on the local policies folder, as well as on
the SYSvol location for our 2003 domain (i could only get the gp
editor to show the new policy if i had it locally, not on the domain,

Good afternoon!
I sure hope that this topic has not been "asked and answered".....Lord knows
I used to give that as a reply a lot.  Anyway, I looked and did not see it.
I also looked on google and did not find anything.  Probably need to have my