Block logon script Windows Server The way our domain policy is setup we have a startup script in the default domain policy to map network drivers and set the computer times. I have been noticing that this the script from running just on his account and keep the script in the default policy? Thanks. Windows Server Active Directory Discussions Vista (1) XP (1) Inheritance (1) Fantomen (1) Incasae (1) Times (1) You can use a WMI-script on your GPO to filter out only 2000 / XP machines. - - G Johansson fantomen@gpfaq I had to do was move the individual into his own group. Then in Group policy management I made a copy of the default domain policy and assigned to his group. Then I blobked the inheritance and removed all policies

all, I have several SBS2003 servers out in the world and doing just fine. My policy has always been to do the Server Updates for these servers MANUALLY during off hours the options so that I cannot change them back. I assume that this is a policy change but I don't know how it got there and why it is present RequireLogonToChangePassword (1) ShowSharedAccessUI (1) ProfileSingleProcessPrivilege (1) IncreaseBasePriorityPrivilege (1) IIS (1) AssignPrimaryTokenPrivilege (1) DenyInteractiveLogonRight (1) Group Policy will do this . . .run an rsop.msc on the server & see where this is being to go on a server. Hi Steve, I agree with Lanwench - this shall be a policy issue. Please run the following command: gpresult / z > C: \ gpresult.txt Then post the content the feedback from the GpResult command, any ideas? ; Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0 Copyright (C) Microsoft Corp. 1981-2001 Created On 8 / 24 / 2007 OS Type: Microsoft(R) Windows(R) Server 2003 for Small Business Server OS Configuration: Primary Domain Controller OS Version: 5.2.3790 Terminal Server Mode: Remote Administration Site Name: Default-First Documents and Settings \ Administrator Connected over a slow link?: No COMPUTER SETTINGS - -- -- -- -- -- -- -- -- - CN = SBSERVER, OU = Domain Controllers, DC = PcWhip, DC = local Last time Group Policy was applied: 8 / 24 / 2007 at 9:48:43 AM Group Policy was applied from

Determine group policy Windows Server There is also a default domain policy but is not directly associated with the containers. However, it seems that the default domain policy is the one that active. How do I determine what group policy is actually taking into affect when a user logs on? What is the rules for which group policy takes precedents over another policy? Thanks! Jasper Windows Group Policy Discussions SubOUSubOU (1) SubOU (1) GPOs (1) ParentOU (1) Maillist

Domain Security policy Windows Server I made changes on the domain policy , but it does not apply to user pc when they login. eg , i allowed change time for a specific user. when i login to the user pc, from the local policy, chnage the system time, only show administrator can change not the specific user. Windows Server Update (1) Accounting (1) XP (1) GPOs (1) Inheritance (1) i onlu have one default policy for the domain, how to create addtional domain policy , also want to create different dept have different group policy. i am new in

that for whatever reason need to be exempt from all Group Policies including the Default Domain Policy. We tried creating an OU and blocking group policy inheritance, but that does not block the default domain policy, so we had to move the machines back into the computers container. What will happen HiWhat (1) HiOk (1) I meant "redircmp.exe, " not "rdircmp.exe" Hello MyGposts, The default domain policy also applies to the computers container, you just can not link GPO's there. What part of the default domain policy do you like to block? Best regards Meinolf Weber Disclaimer: This posting is provided