In news:E2D92742-915B-4302-9B93-(E-Mail Removed),
Wayne <(E-Mail Removed)> typed:
> No I think you are mistaken
>
> I run a couple of domains and consult on several more. So I set up a
> test domain because I was told this was possible.
>
> Specifically I wanted one profile for several users (eventually
> making it mandatory) this way I could add things to the desktop,
> change the wallpaper, and adjust things like cookies.
You didn't mention that this was going to be a shared profile - and if you
want it to be the same one, you will have to make it mandatory, I think, or
you'll run into all sorts of problems. Why not use individual profiles for
each user but force the settings you want via policy where possible? (I
don't know much about how you could handle cookies that way, but
wallpaper/desktop/etc aren't that big a deal).
>
> I also wanted to change the default location of "My Documents" that
> resided inside of the roaming profiles file, so every user had there
> own folder, to a mapped drive (bat file).
Foder redirection policy (but the users can't be sharing the same mandatory
profile, of couse!)
> I also hoped to change
> some of the Internet Explorer options so I could add options like
> proxy setting, favorites, and things like the home page (all of these
> you can set with policies).
Yes.
> And, most of all, I wanted to add the
> security of locking things like control panel, network neighborhood,
> shutdown, run command, dos prompt, task manager, MSN Instant
> Messaging, and Regedit.
>
> In the test domain I set up a profile for several users, and the only
> policy that seems to run is the default domain policy.
Well - what policies did you create/expect to run? What did they do, where
did you link them? In the GPMC, did you try using the modeling wizards? Did
you try running rsop.msc on the client? gpresult from a command line?
> And with the
> default domain policy, only the simplest things seem to run like;
> password information, and "logon script".
I wouldn't mess with the default domain policy for anything other than
password settings - create policies yourself for the other stuff.
>
> I assumed that policies always override everything, but ..
>
> Now if my facts are mistaken please let me know and I will retest
> this.
You might also post in microsoft.public.windows.group_policy for more expert
help.
Nearly all my clients use roaming profiles and folder redirection, with most
things controlled via group policy. I don't use shared profiles (I don't see
the point), so I don't know exactly what you're experiencing, but I suggest
you set up
>
> Wayne
> MCSE, MCP, Exchange, Apple, Lexmark, Xerox, etc, etc.
>
>
> "Lanwench [MVP - Exchange]" wrote:
>
>>
>>
>> In news:B24E6A7A-2654-478A-9840-(E-Mail Removed),
>> Wayne <(E-Mail Removed)> typed:
>>> Can you have roaming profiles, and run policies at the same time?
>>> Windows 2003 domain.
>>
>> Roaming profiles and group policies? Sure. What is it you want them
>> to do?
|