Group Policy Settings Examples

[mattpant]

Hi,

 

Does anybody know of any websites where I might be able to find examples of Group Policys people have used, ideally in schools.

 

Seems such a simple thing to do now by saving the reports from the new GP Management in Server 2003 but can't seem to find any examples anywhere on the web!

 

Anybody able to help?

 

Regards,

 

Matt

[Geoff]

Well, uh, how about here?

 

What aspects are you interesting in paticularly?

[Dos_Box]

Good God! How much info do you need? The problem (or good thing, depending on your point of view) is that AD GPOs' are as tough or as open as you want\need them to be. I think it would be best if you let people know exactly what you wanted to achieve rather than asking for a genieric example. Desktop GPOs' are a prime example of this.

[ChrisH]

Hmm I must be seeing things I thought I saw exam somewhere

[MkII]

ICTNUT posted his in a thread somewhere.

[mattpant]

OK,

 

The areas I'm keen on would be locking down users, but mainly sorting out the problems I'm getting here with Sync of folders.

 

We have a number of Tablet PCs and they obvioulsy connect up online and sometimes offline. What I don't want is them Sync any changes, as sometimes the User is logged onto a Tablet from their class, but may use a PC in a classroom.

 

We are using Roaming Profiles for staff, Re-Directing My Docs to their Home Drive and Desktop to a server location, I don;t want anything to Sync when they log out, but whenever I try the settings on the server to stop this, they still seem to want to Sync!!

 

Any Ideas???

 

Thanks,

 

Matt

[_Bob_]

We had trouble with laptops that insisted on syncing everytime they cannected to the network. You can change the settings on the shares themselves to prevent them from being 'availible offline' but if you have lots of shares as we do its a pain. In the end we just logged in as local admin on each machine and disabled offline folders.

[MkII]

local machine - explorer > tools > folder options > offline files > uncheck: enable offline files

[E1uSiV3]

We had trouble with laptops that insisted on syncing everytime they cannected to the network. You can change the settings on the shares themselves to prevent them from being 'availible offline' but if you have lots of shares as we do its a pain. In the end we just logged in as local admin on each machine and disabled offline folders.

 

You can disable offline files using group policy:

 

User Configuration\Administrative Templates\Network\Offline Files

 

Microsoft has a full list of group policies that affect offline files.

 

EDIT: Doh! beat me to it there Mark lol

 

side note: woo i got 2 stars only a million or so to go to catch up Tarqel :twisted:

[MkII]

In my experience setting this from sever policy doesn't work - it has to be done on the local machine.

[kingswood]

I tend to agree with Mark here- even with the GPO set not to enable offline files, we still have problems with machines that insist on synchronising with the server. In the past this has caused a corrupt profile. What we do is disable the feature on the local machine, and that tends to help.

 

Mind you- this is only on some of the machines. Many of them obey the dictates of the Group Policy system. Not sure why...

 

Paul

[Geoff]

Chances are you didn't clear out the offline file cache.

[eejit]

We had problems with this too. You have to disable offline files in the "computer" AND "user" areas of a group policy. That definitely works throughout the domain.

[ICTNUT]

@ mattpant:

 

Go here --> http://www.edugeek.net/index.php?name=Forums&file=viewtopic&t=441

 

I had attached a complete group policy list of all available settings under 2000 / 2003 / XP.

 

That should help you with what you need.

[mattpant]

Hi Guys,

 

Many thanks for your replys, I've been in today and had a play and thing I achieved what I was after, we'll see what happens on Monday I guess!

 

Just a quick querry with regards to setting Internet Settings via GP, I have under a "user" GP settings for the proxy server, home page, Fav Links etc etc, but they never seem to be applied when a user logs in,

 

I have also added to our Default Domain GP under the Computer Section - Admin Templates - System - Group Policy - And Enable the setting about Internet Explorer GP Settings, but this still doesn't seem to make a difference

 

Any Ideas?

[mattpant]

Sorry, forgot to mention... It's Server 2003 with Windows XP SP 2 Clients

[Ric_]

@mattpant: The user setting is what you want but the settings aren't necessarily updated immediately.

 

Make sure that your DCs have replicated (possibly force it in sites and services) the run gpupdate on the clients.

[MkII]

I have the problm that profiles are not deleted locally I think [well I can't understand it to be anything else]. I set changes via GPO which some users never pick up, unless I delete locally stored profiles. [deleting their server profiles is ineffective]

 

I still have to try UPHClean which i'm sure must fix the problem.

 

@Geoff - where exactly is that offline cache?

[tosca925]

From a CMD line run gpupdate /force

[MkII]

Done that Tosca - the poicy changes never happen so it isn't that.

[Geoff]

what does the GPMC think?