Silly security policy question  
Author Message
John





PostPosted: Mon Dec 01 17:39:42 CST 2003 Top

Windows XP Security >> Silly security policy question Hello,

I am new to a mixed workgroup environment running NT 4.0,
Windows 2000 and XP. For some time, we have been running
poledit.exe from NT 4.0 to lock down our desktops that
reside in a public environment. We have been applying
this policy to both NT 4.0 and Windows 2000. For the
first time today, we were trying to apply the policy to
Windows XP and have not had very much luck. I have been
unable to find any definitive documentation that states
when poledit.exe became obsolete. Can I use it on XP or
not?

Thanks in advance for any advice.

Lori Eby

Windows XP873  
 
 
Torgeir





PostPosted: Mon Dec 01 17:39:42 CST 2003 Top

Windows XP Security >> Silly security policy question Lori Eby wrote:

> I am new to a mixed workgroup environment running NT 4.0,
> Windows 2000 and XP. For some time, we have been running
> poledit.exe from NT 4.0 to lock down our desktops that
> reside in a public environment. We have been applying
> this policy to both NT 4.0 and Windows 2000. For the
> first time today, we were trying to apply the policy to
> Windows XP and have not had very much luck. I have been
> unable to find any definitive documentation that states
> when poledit.exe became obsolete. Can I use it on XP or
> not?

Hi

It is still supported for WinXP:
http://www.microsoft.com/technet/prodtechnol/winxppro/proddocs/PoleditAD.asp

Some more information from Windows XP Resource Kit:

The role of Administrative Templates
http://www.microsoft.com/technet/prodtechnol/winxppro/proddocs/ADMinAD.asp

Windows NT 4.0 system policies
http://www.microsoft.com/technet/prodtechnol/winxppro/proddocs/tattooing.asp

--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter


 
 
Mike





PostPosted: Tue Dec 02 05:13:42 CST 2003 Top

Windows XP Security >> Silly security policy question "Lori Eby" <EMail@HideDomain.com> wrote in message
news:03ff01c3b860$37458520$EMail@HideDomain.com...
> Hello,
>
> I am new to a mixed workgroup environment running NT 4.0,
> Windows 2000 and XP. For some time, we have been running
> poledit.exe from NT 4.0 to lock down our desktops that
> reside in a public environment. We have been applying
> this policy to both NT 4.0 and Windows 2000. For the
> first time today, we were trying to apply the policy to
> Windows XP and have not had very much luck. I have been
> unable to find any definitive documentation that states
> when poledit.exe became obsolete. Can I use it on XP or
> not?

Lori,

Poledit became obsolete with Windows 2000 and Active Directory Group Policy
Objects.
If you are in an Active Directory domain environment with Windows 2000
and/or Windows XP machines you should not use ntconfig.pol files and
poledit. You should be using GPOs for those machines.

You can use ntconfig.pol with both Windows 2000 and XP but you should not,
there are better more manageable solutions available in GPOs.

--
Regards,

Mike
--
Mike Brannigan [Microsoft]

This posting is provided "AS IS" with no warranties, and confers no
rights

Please note I cannot respond to e-mailed questions, please use these
newsgroups

"Lori Eby" <EMail@HideDomain.com> wrote in message
news:03ff01c3b860$37458520$EMail@HideDomain.com...
> Hello,
>
> I am new to a mixed workgroup environment running NT 4.0,
> Windows 2000 and XP. For some time, we have been running
> poledit.exe from NT 4.0 to lock down our desktops that
> reside in a public environment. We have been applying
> this policy to both NT 4.0 and Windows 2000. For the
> first time today, we were trying to apply the policy to
> Windows XP and have not had very much luck. I have been
> unable to find any definitive documentation that states
> when poledit.exe became obsolete. Can I use it on XP or
> not?
>
> Thanks in advance for any advice.
>
> Lori Eby


 
 
Lori





PostPosted: Tue Dec 02 12:14:08 CST 2003 Top

Windows XP Security >> Silly security policy question
>-----Original Message-----
>"Lori Eby" <EMail@HideDomain.com> wrote in message
>news:03ff01c3b860$37458520$EMail@HideDomain.com...
>> Hello,
>>
>> I am new to a mixed workgroup environment running NT
4.0,
>> Windows 2000 and XP. For some time, we have been
running
>> poledit.exe from NT 4.0 to lock down our desktops that
>> reside in a public environment. We have been applying
>> this policy to both NT 4.0 and Windows 2000. For the
>> first time today, we were trying to apply the policy to
>> Windows XP and have not had very much luck. I have been
>> unable to find any definitive documentation that states
>> when poledit.exe became obsolete. Can I use it on XP or
>> not?
>
>Lori,
>
>Poledit became obsolete with Windows 2000 and Active
Directory Group Policy
>Objects.
>If you are in an Active Directory domain environment with
Windows 2000
>and/or Windows XP machines you should not use
ntconfig.pol files and
>poledit. You should be using GPOs for those machines.
>
>You can use ntconfig.pol with both Windows 2000 and XP
but you should not,
>there are better more manageable solutions available in
GPOs.
>
>--
>Regards,
>
>Mike
>--
>Mike Brannigan [Microsoft]
>
>This posting is provided "AS IS" with no warranties, and
confers no
>rights
>
>Please note I cannot respond to e-mailed questions,
please use these
>newsgroups
>
>"Lori Eby" <EMail@HideDomain.com> wrote in message
>news:03ff01c3b860$37458520$EMail@HideDomain.com...
>> Hello,
>>
>> I am new to a mixed workgroup environment running NT
4.0,
>> Windows 2000 and XP. For some time, we have been
running
>> poledit.exe from NT 4.0 to lock down our desktops that
>> reside in a public environment. We have been applying
>> this policy to both NT 4.0 and Windows 2000. For the
>> first time today, we were trying to apply the policy to
>> Windows XP and have not had very much luck. I have been
>> unable to find any definitive documentation that states
>> when poledit.exe became obsolete. Can I use it on XP or
>> not?
>>
>> Thanks in advance for any advice.
>>
>> Lori Eby
>
>
>.
>Thanks for the information, which was just what I
expected, but I am in a workgroup environment, not a
domain environment so GPO is pretty much out of the
question. We are trying to figure out how to use the
Local Group Policy and apply it to only one user. Any
suggestions?

Also, can you recommend any online resoureces for
information on local security policy on Windows XP? I
have not been very successful on the MS site itself.

Thanks.