Windows 2003 local group policy editor

For Administrative Templates policy settings, Local Group Policy Editor provides information about each policy setting directly in the web view of the console. This information shows operating system requirements, defines the policy setting, and includes any specific details about the effect of enabling or disabling the policy setting. In addition, developers should be able to quickly and easily add Group Policy support to their software products. The Local Group Policy Editor is designed to be extensible.

Say that you create a shortcut on your desktop to an application. When you delete the shortcut, the application is unaffected. Go to the application's folder and delete its executable, and the program is gone. Its remnants, however, are still floating around the registry because you didn't remove it properly. The same is true for GPOs and links. When you delete a link, the associated GPO is unaffected. Delete the GPO itself, however, and it's gone.

Windows displays a dialog box that gives you two options:. Exercise some care when you delete GPOs. Windows provides no warning if a GPO you're deleting is linked to other objects. You've read previously that Windows Server applies the local group policy first and then applies GPOs at the site, domain, and OU levels. Each computer has only one local GPO.

You also can open the local GPO of other computers across the network. Rather than accept the Local Computer default, click Browse, then click the Computers tab. Select the Another Computer option, then type the computer name in the field provided or click Browse to locate it. Creating group policy objects As a quick review, recall that a GPO is a named collection of group policy settings that you link to specific containers in Active Directory AD.

Creating links to existing GPOs Assume that you've just spent several days creating a GPO to link to a particular OU and have tested and verified that the policies it contains are correct. Deleting links and GPOs There will no doubt come a time when you need to either delete a link to a GPO or delete the GPO itself, and it's important to understand that the two actions are quite different.

Windows displays a dialog box that gives you two options: Remove the link from the list Remove the link and delete the Group Policy Object permanently Select the desired action and click OK.

Configuring local group policy You've read previously that Windows Server applies the local group policy first and then applies GPOs at the site, domain, and OU levels. Administrative Templates and Scripts: gptext.

Folder Redirection: fde. Internet Explorer Maintenance: ieaksie. IP Security: ipsecsnp. Public Key and Software Restriction: certmgr. Remote Installation Services: rigpsnap. Security: wsecedit. Software Installation: appmgr. For more information please refer to following MS articles:. TechNet Community Support. After a little bit more review, it turns out that I've been a right fool about this, or at least the victim of some truly non-intuitive UI changes introduced in the RSAT tools.

When you're editing a local group policy, the "Administrative Templates" folder is a top-level entry. When you're editing a group policy object on the domain using the Windows 7 RSAT tools, however, "Administrative Templates" is nested under the "Policy" folder. Right-click the domain name and select Properties from the menu that appears: The properties window of the domain appears. Click the Group Policy tab.

A new group policy object appears below the Default Domain Policy in the Group Policy tab , as shown below: Once you rename this group policy, you can either double-click on it, or select it and click Edit. You'll next be presented with the Group Policy Object Editor from where you can select the changes you wish to apply to the specific Group Policy : In this example, we have selected to Remove Run menu from Start Menu as shown above.

When done, click on OK to save the new setting. Article Summary Domain Group Policies give the administrator great control over its domain users by enhancing security levels and restricting access to specific areas of the operating system.

Back to Windows Server Section Windows Group Policies allow the administrators to manage a group of people accessing a resource efficiently.

Right-click the domain name and select Properties from the menu that appears. The properties window of the domain appears. A new group policy object appears below the Default Domain Policy in the Group Policy tab, as shown below: Once you rename this group policy, you can either double-click on it, or select it and click Edit.

You'll next be presented with the Group Policy Object Editor from where you can select the changes you wish to apply to the specific Group Policy: In this example, we have selected to Remove Run menu from Start Menu as shown above. About the writers GFI Software provides the single best source of network security, content security and messaging software for small to medium sized businesses.

Alan Drury is member of the Firewall. Articles To Read Next:. Active Directory Tombstone Lifetime Modification. Configuring Windows Server Roaming Profiles.