ThePrutser

I am not sure if you are right about this. What I get from your post is that you just set the custom policy to not configured. Because it is a custom policy where registry settings will be set, it is not enough to set it to "unconfigured" the setting will still be as it was. To turn off this custom policy you actually have to set it to disabled. To be sure check the registry on the computer where you "think" you have found the problem, I am afraid you will see that the registry setting is still in effect. Or probably I am not completely following what you are trying to say

Just bought one a month ago. First impression: WOW! Second impression: WOW! My PSN is pretty obvious too: ThePrutser Games in playing-most-often order: LBP, Kill Zone 2, EyePet, NFS: Undercover, Buzz and some more forgot which

Well, I do have some experience in creating .adm files. As Microsoft lacks a lot of settings in the default GPO's, I got a lot of hands on experience creating .ADM files. I used the following for reference: Writing Custom ADM Files for System Policy Editor How to write custom .adm and .admx administrative template files ... How to create a custom .adm file Also looking in the already existing .adm files (not the ADMX files, those are in the new 2008/vista/7 format), gives a good idea on how .adm files work and/or are build. Futhermore there is a tool reg2adm, which takes some of the work out of your hands, but still needs a lot of afterwards editing to get a working .ADM. I also look in the registy to see in what value the registry changes when I apply a setting. And of course you can export registry settings using regedit. You then use the reg file to convert to .adm, with reg2adm.

Did you also check the ISA server for any rules which allow admin to download files, but disallow download for normal users?

In windows 2008 you need to look under "Classic Administrative Templates" and in the filtering turn off "Only show policy settings that can be fully managed" I attached a screenshot (made on a Windows 2008 server). In the screenshot you can also see, that I can see the specific settings. [EDIT] You probably just found it as I posted this

Although Penfold does have point there, I would still advise to use a group policy to lock down these kind of settings. Using group policy you are more flexible in appling settings to specific users or groups. Anyway, here it is. It took a while and I have done some base testing and it seems to work. Here is the exact code. CLASS USER CATEGORY "Control Panel" CATEGORY "Accessibility" POLICY "Blind Access" KEYNAME "Control Panel\Accessibility\Blind Access" VALUENAME "On" VALUEON 1 VALUEOFF 0 END POLICY POLICY !!Display KEYNAME "Control Panel\Accessibility\HighContrast" PART !!DisplaySetting DROPDOWNLIST VALUENAME "Flags" ITEMLIST NAME "Use High Contrast - on, Use Shortcut - on" VALUE 127 NAME "Use High Contrast - off, Use Shortcut - on" VALUE 126 NAME "Use High Contrast - on, Use Shortcut - off" VALUE 123 NAME "Use High Contrast - off, Use Shortcut - off" VALUE 122 END ITEMLIST END PART END POLICY POLICY !!KeyboardPreference KEYNAME "Control Panel\Accessibility\Keyboard Preference" VALUENAME "On" VALUEON 1 VALUEOFF 0 END POLICY POLICY !!FilterKeys KEYNAME "Control Panel\Accessibility\Keyboard Response" PART !!FilterKeysSetting DROPDOWNLIST VALUENAME "Flags" ITEMLIST NAME "Use Filter Keys - on, Use Shortcut - on" VALUE 127 NAME "Use Filter Keys - off, Use Shortcut - on" VALUE 126 NAME "Use Filter Keys - on, Use Shortcut - off" VALUE 123 NAME "Use Filter Keys - off, Use Shortcut - off" VALUE 122 END ITEMLIST END PART END POLICY POLICY !!MouseKeys KEYNAME "Control Panel\Accessibility\MouseKeys" PART !!MouseKeysSetting DROPDOWNLIST VALUENAME "Flags" ITEMLIST NAME "Use Mouse Keys - on, Use Shortcut - on" VALUE 63 NAME "Use Mouse Keys - off, Use Shortcut - on" VALUE 62 NAME "Use Mouse Keys - on, Use Shortcut - off" VALUE 59 NAME "Use Mouse Keys - off, Use Shortcut - off" VALUE 58 END ITEMLIST END PART END POLICY POLICY !!ShowSounds KEYNAME "Control Panel\Accessibility\ShowSounds" VALUENAME "On" VALUEON 1 VALUEOFF 0 END POLICY POLICY !!SoundSentry KEYNAME "Control Panel\Accessibility\SoundSentry" VALUENAME "Flags" VALUEON 3 VALUEOFF 2 PART !!SoundSentryVisualWarning DROPDOWNLIST VALUENAME "WindowsEffect" ITEMLIST NAME "Flash active caption bar" VALUE 1 NAME "Flash active windows" VALUE 2 NAME "Flash desktop" VALUE 3 END ITEMLIST END PART END POLICY POLICY !!StickyKeys KEYNAME "Control Panel\Accessibility\StickyKeys" PART !!StickyKeysSettings DROPDOWNLIST VALUENAME "Flags" ITEMLIST NAME "Use Sticky Keys - on, Use Shortcut - on" VALUE 511 NAME "Use Sticky Keys - off, Use Shortcut - on" VALUE 510 NAME "Use Sticky Keys - on, Use Shortcut - off" VALUE 507 NAME "Use Sticky Keys - off, Use Shortcut - off" VALUE 506 END ITEMLIST END PART END POLICY POLICY !!Autoreset KEYNAME "Control Panel\Accessibility\TimeOut" VALUENAME "Flags" VALUEON 3 VALUEOFF 2 PART !!AutoResetTimeout DROPDOWNLIST VALUENAME "TimeToWait" ITEMLIST NAME " 5 minutes" VALUE 300000 NAME "10 minutes" VALUE 600000 NAME "15 minutes" VALUE 900000 NAME "20 minutes" VALUE 1200000 NAME "25 minutes" VALUE 1500000 NAME "30 minutes" VALUE 1800000 END ITEMLIST END PART END POLICY POLICY !!ToggleKeys KEYNAME "Control Panel\Accessibility\ToggleKeys" PART !!ToggleKeysSetting DROPDOWNLIST VALUENAME "Flags" ITEMLIST NAME "Use ToggleKeys - on, Use Shortcut - on" VALUE 63 NAME "Use ToggleKeys - off, Use Shortcut - on" VALUE 62 NAME "Use ToggleKeys - on, Use Shortcut - off" VALUE 59 NAME "Use ToggleKeys - off, Use Shortcut - off" VALUE 58 END ITEMLIST END PART END POLICY END CATEGORY END CATEGORY [strings] Display=Configure High Contrast and its shortcut settings DisplaySetting=High Contrast and shortcut setting KeyboardPreference=Enable Keyboard Preference FilterKeys=Configure FilterKeys and its shortcut settings FilterKeysSetting=FilterKeys and shortcut setting MouseKeys=Configure MouseKeys and its shortcut settings MouseKeysSetting=MouseKeys and shortcut setting ShowSounds=Use ShowSounds SoundSentry=Use SoundSentry SoundSentryVisualWarning=Choose the visual warning: StickyKeys=Configure StickyKeys and its shortcut settings StickyKeysSettings=StickyKeys and shortcut setting Autoreset=Enable Automatic Reset of the accessibility AutoResetTimeout=Turn off accessibility features after idle for: ToggleKeys=Configure ToggleKeys and its shortcut settings ToggleKeysSetting=ToggleKeys and shortcut setting. Copy this code to a text file. Save this file as AccessibilityOptions.adm (or whatever name you like, make sure it ends with .adm). Then add this template to the Administrative Templates of a group policy especially for users. In the policy browse to "Control Panel" -> "Accessibility". There you should see 10 settings, if you don't then activate the Administrative Templates Hive, right click and choose "View" -> "Filtering..." (if you right click on a hyve which is not selected it will not show the "View" option!). Clear the check box for "Only show policy settings that can be fully managed". The settings should speak for them selves. I have not added any "help" sections, because I am too lazy, the settings are pretty straightforward and it would take even more time. Let me know the results or if you need some more help! Note These are not fully managed registry settings you apply using group policy. This means if you no longer want to use these settings, only removing the policy or setting the options to not configured does not change the registry back to it original setting. You would have to re-enable the default settings using this policy first, before removing the policy.

Well I am converting it to a .ADM file as we speak. An .ADM file can be added to a group policy so it can be applied using a policy. And other option is to import the registry settings using a logon script. It is a rather big registry file to convert to .adm, so I need a few minutes (or more)

There are indeed no policy settings to enforce these settings. You could create a custom .adm file to enforce specific registry settings. Below are the registry settings which completely disable the accessibility options, also for the default user. Windows Registry Editor Version 5.00 [HKEY_USERS\.DEFAULT\Control Panel\Accessibility] [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\Blind Access] "On"="0" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\HighContrast] "Flags"="122" "High Contrast Scheme"="High Contrast Black (large)" "Volital HC Scheme"="High Contrast Black (large)" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\Keyboard Preference] "On"="0" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\Keyboard Response] "AutoRepeatDelay"="1000" "AutoRepeatRate"="500" "BounceTime"="0" "DelayBeforeAcceptance"="1000" "Flags"="122" "Last BounceKey Setting"=dword:000001f4 "Last Valid Delay"=dword:000003e8 "Last Valid Repeat"=dword:000001f4 "Last Valid Wait"=dword:000003e8 [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\MouseKeys] "Flags"="58" "MaximumSpeed"="80" "TimeToMaximumSpeed"="3000" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\SerialKeys] [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\ShowSounds] "On"="0" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\SoundSentry] "Flags"="2" "FSTextEffect"="0" "WindowsEffect"="0" "TextEffect"="0" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\StickyKeys] "Flags"="506" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\TimeOut] "Flags"="2" "TimeToWait"="300000" [HKEY_USERS\.DEFAULT\Control Panel\Accessibility\ToggleKeys] "Flags"="58" [HKEY_CURRENT_USER\Control Panel\Accessibility] [HKEY_CURRENT_USER\Control Panel\Accessibility\Blind Access] "On"="0" [HKEY_CURRENT_USER\Control Panel\Accessibility\HighContrast] "Flags"="122" "High Contrast Scheme"="High Contrast Black (large)" "Volital HC Scheme"="High Contrast Black (large)" [HKEY_CURRENT_USER\Control Panel\Accessibility\Keyboard Preference] "On"="0" [HKEY_CURRENT_USER\Control Panel\Accessibility\Keyboard Response] "AutoRepeatDelay"="1000" "AutoRepeatRate"="500" "BounceTime"="0" "DelayBeforeAcceptance"="1000" "Flags"="122" "Last BounceKey Setting"=dword:000001f4 "Last Valid Delay"=dword:000003e8 "Last Valid Repeat"=dword:000001f4 "Last Valid Wait"=dword:000003e8 [HKEY_CURRENT_USER\Control Panel\Accessibility\MouseKeys] "Flags"="58" "MaximumSpeed"="80" "TimeToMaximumSpeed"="3000" [HKEY_CURRENT_USER\Control Panel\Accessibility\SerialKeys] [HKEY_CURRENT_USER\Control Panel\Accessibility\ShowSounds] "On"="0" [HKEY_CURRENT_USER\Control Panel\Accessibility\SoundSentry] "Flags"="2" "FSTextEffect"="0" "WindowsEffect"="0" "TextEffect"="0" [HKEY_CURRENT_USER\Control Panel\Accessibility\StickyKeys] "Flags"="506" [HKEY_CURRENT_USER\Control Panel\Accessibility\TimeOut] "Flags"="2" "TimeToWait"="300000" [HKEY_CURRENT_USER\Control Panel\Accessibility\ToggleKeys] "Flags"="58" And the .ADM code [untested!] removed the code, need some more work to get it working this way. Stay tuned ;-)

Good to hear it finally works. Too bad we couldn't figure out what was/is going wrong with the image in the first place.

You will not believe this but the solution is very simple, I missed it too. Behind [strings] there is a space, remove this space and the error is gone. I have tested it overhere and it works (had not test is before, sorry) I also corrected the code above. Please let me know if it works for you too.

It is possible using DHCP relay agents/settings on the routers which support this feature. I suppose the network is subnetted, so you can configure different DHCP scopes for every remote location. The DHCP server will figure out what address to send out to the requesting client by network id. (I will not go in the exact technical details here). Just keep in mind: What if there is connection failure, how will the clients get their ip addresses? Or is the network designed to provide all services from one central location?

>The policy is applied to the user configuration. You mean it works now, or to what question are you responding?

Here is the code to use in a custom .adm file CLASS USER CATEGORY "Windows Components" CATEGORY "Windows Explorer" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" POLICY !!HiddenFilesAndFolders EXPLAIN !!HiddenFilesAndFolders_Help VALUENAME Hidden VALUEON NUMERIC 1 VALUEOFF NUMERIC 2 END POLICY END CATEGORY END CATEGORY [strings] HiddenFilesAndFolders="Show Hidden files and folders" HiddenFilesAndFolders_Help="Configures the folder option Hidden files and folders.\n\nIf you enable this policy, hidden files and folder will be shown.\n\nIf you disable this policy, hidden files and folder will not be shown.\n\n You will need to explicitly disable or enable this policy. Setting it to not configured leaves the setting as it was configured the last time" Copy this code to a text file. Save this file as hiddenFiles.adm (or whatever name you like, make sure it ends with .adm). Add this template to the Administrative Templates of a group policy especially for users. Browse to windows components, Windows Explorer there should be a new setting called "Show Hidden files and folders". Configure the setting the way you want to. If it does not show. Activate the Administrative Templates Hive, right click and choose "View" -> "Filtering..." (if right click without selecting Administrative Templates it will not show the "View" option!). Clear the check box for "Only show policy settings that can be fully managed". Please let me know if it works. For more info on edit/creating custom .adm files click here

User Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced Value Name: Hidden Data Type: REG_DWORD (DWORD Value) Value Data: (1 = show hidden, 2 = do not show) You could make a custom .adm file load this into the policy and set this registry setting for the users using this policy.

>Does anyone know how to turn off (as in totally KILL) the OWA 2010 conversation view? Totally disabling it or killing it so to speak is not possible, as far as I know. What you can do is change the "Arrange by" option and clear the check box of "Conversation"