gsk Posted September 12, 2011 Posted September 12, 2011 Hi All, I'm trying to change a setting in the standard usertype policy directly in AD. GPMC says it is in User Config\Admin Templates\System but the only thing that appears in Admin Templates is Research Machines. Where should I be looking? Thanks.
MK-2 Posted September 12, 2011 Posted September 12, 2011 (edited) You might need to add in the other policy by add/remove in MMC. What setting is it? Just be careful when doing this on CC4 as RM aren't always happy with you editing stuff in AD, if it's not in the RMMC they probably don't want you to change it and might not support you if you have problems after Edited September 12, 2011 by MK-2
webman Posted September 12, 2011 Posted September 12, 2011 If you need to add settings to RM CC4 Group Policies, add the setting as a registry fragment using the Management Console.
gsk Posted September 12, 2011 Author Posted September 12, 2011 Discontinuing the use of RM and their support and am using the RM AD in the interim until we migrate to 2008 and rebuild the domain. Thanks for the tip about add/remove adms.
MK-2 Posted September 12, 2011 Posted September 12, 2011 If you're discontinuing RM (which is exactly what we did) I'd suggest creating an entirely new OU outside of the one RM use, disable inheritance and create policies you want there. We found that even by editing some of the RM policies it still inherited weird and wonderful ones from elsewhere that were configurable in RMMC. We ended up having Establishments/XXX/ which was the RM one and Establishments/XXX-nonrm/ which was our interim one. If you are going totally RM, PM me as we have a few batch files that can disable or remove RM components on client machines without you having to rebuild. We did this and ran successfully from last Oct til this July when we fully rebuilt 1
gsk Posted September 12, 2011 Author Posted September 12, 2011 (edited) Thank you for the offer. I spent some time last week on a station getting the removal of the local RM stuff right and that seems to be working well (using the wmic tool in a batch file if anyones interested). I just had a problem with running logon scripts as RM had disabled the command prompt (I'm using using .bat logon scripts from 'back in the day'!) and had also disabled it for scripting too. I found the setting buried in an RM adm in the end. Watch this space for when it all goes pear-shaped though! Edited September 12, 2011 by gsk
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now