Lockdown GPO issue


Go Back   Computer Help Articles > Windows XP Security Admin
User Name
Password
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 01-05-2006, 05:06 AM
AmyAmandaAllen
 
Posts: n/a
Default Lockdown GPO issue

Hi,

At work we have a set homepage in IE which is now unadjustable as we have
installed group policy on each machine. Now our directors have decided to
change their mind ( management ) which would need us to manually visit each
site ( all 40 of em ) and change every machines homepage and disable group
policy etc. A big headache . Is their any way to create a script or
something very similar which we can just send out to our employees on site?

Thanks
Reply With Quote
  #2  
Old 01-05-2006, 05:06 AM
Steven L Umbach
 
Posts: n/a
Default Re: Lockdown GPO issue

Are these computers part of an Active Directory domain?? If they are you
should be able to use Group Policy. Look at user configuration/Windows
settings/Internet Explorer maintenance/URLs - important URL's. Also see the
link below on IE maintenance processing. --- Steve

http://www.sysinternals.com/Utilities/PsShutdown.html

"AmyAmandaAllen" <AmyAmandaAllen@discussions.microsoft.com> wrote in message
news:E4CD8AF7-B952-44FD-973A-FE894176FF58@microsoft.com...
> Hi,
>
> At work we have a set homepage in IE which is now unadjustable as we have
> installed group policy on each machine. Now our directors have decided to
> change their mind ( management ) which would need us to manually visit
> each
> site ( all 40 of em ) and change every machines homepage and disable group
> policy etc. A big headache . Is their any way to create a script or
> something very similar which we can just send out to our employees on
> site?
>
> Thanks



Reply With Quote
  #3  
Old 01-05-2006, 05:06 AM
AmyAmandaAllen
 
Posts: n/a
Default Re: Lockdown GPO issue

hi,

no these are either standalone or small workgroups.

Have found what I need to set in group policy but wondering if theres a
command line change I could do to edit gpedit?

"Steven L Umbach" wrote:

> Are these computers part of an Active Directory domain?? If they are you
> should be able to use Group Policy. Look at user configuration/Windows
> settings/Internet Explorer maintenance/URLs - important URL's. Also see the
> link below on IE maintenance processing. --- Steve
>
> http://www.sysinternals.com/Utilities/PsShutdown.html
>
> "AmyAmandaAllen" <AmyAmandaAllen@discussions.microsoft.com> wrote in message
> news:E4CD8AF7-B952-44FD-973A-FE894176FF58@microsoft.com...
> > Hi,
> >
> > At work we have a set homepage in IE which is now unadjustable as we have
> > installed group policy on each machine. Now our directors have decided to
> > change their mind ( management ) which would need us to manually visit
> > each
> > site ( all 40 of em ) and change every machines homepage and disable group
> > policy etc. A big headache . Is their any way to create a script or
> > something very similar which we can just send out to our employees on
> > site?
> >
> > Thanks

>
>
>

Reply With Quote
  #4  
Old 01-05-2006, 05:06 AM
Steven L Umbach
 
Posts: n/a
Default Re: Lockdown GPO issue

Well in that case for that setting you could try a .reg file that would look
like the following where you would want to of course modify for the actual
webpage. You could copy into notepad and save with a .reg extension. Then
on a test computer try clicking the .reg file to see if it works for the
users. --- Steve

http://support.microsoft.com/default.aspx?kbid=310516 --- info on using
reg files.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.mypage.com/"


"AmyAmandaAllen" <AmyAmandaAllen@discussions.microsoft.com> wrote in message
news:74A17A81-C3C7-4C03-BD1D-850A7F50EC44@microsoft.com...
> hi,
>
> no these are either standalone or small workgroups.
>
> Have found what I need to set in group policy but wondering if theres a
> command line change I could do to edit gpedit?
>
> "Steven L Umbach" wrote:
>
>> Are these computers part of an Active Directory domain?? If they are you
>> should be able to use Group Policy. Look at user configuration/Windows
>> settings/Internet Explorer maintenance/URLs - important URL's. Also see
>> the
>> link below on IE maintenance processing. --- Steve
>>
>> http://www.sysinternals.com/Utilities/PsShutdown.html
>>
>> "AmyAmandaAllen" <AmyAmandaAllen@discussions.microsoft.com> wrote in
>> message
>> news:E4CD8AF7-B952-44FD-973A-FE894176FF58@microsoft.com...
>> > Hi,
>> >
>> > At work we have a set homepage in IE which is now unadjustable as we
>> > have
>> > installed group policy on each machine. Now our directors have decided
>> > to
>> > change their mind ( management ) which would need us to manually visit
>> > each
>> > site ( all 40 of em ) and change every machines homepage and disable
>> > group
>> > policy etc. A big headache . Is their any way to create a script or
>> > something very similar which we can just send out to our employees on
>> > site?
>> >
>> > Thanks

>>
>>
>>



Reply With Quote
  #5  
Old 01-05-2006, 05:06 AM
AmyAmandaAllen
 
Posts: n/a
Default Re: Lockdown GPO issue

that worked in a sense many thanks.

unfortunatly grouppolict is enabled on these pc's and therefor prevents me
from temporarily disabling the policy in place that lets me edit the
registry. Any ideas how to automate this? Save outr users lots of hassle.

Thanks again



"Steven L Umbach" wrote:

> Well in that case for that setting you could try a .reg file that would look
> like the following where you would want to of course modify for the actual
> webpage. You could copy into notepad and save with a .reg extension. Then
> on a test computer try clicking the .reg file to see if it works for the
> users. --- Steve
>
> http://support.microsoft.com/default.aspx?kbid=310516 --- info on using
> reg files.
>
> Windows Registry Editor Version 5.00
>
> [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
> "Start Page"="http://www.mypage.com/"
>
>
> "AmyAmandaAllen" <AmyAmandaAllen@discussions.microsoft.com> wrote in message
> news:74A17A81-C3C7-4C03-BD1D-850A7F50EC44@microsoft.com...
> > hi,
> >
> > no these are either standalone or small workgroups.
> >
> > Have found what I need to set in group policy but wondering if theres a
> > command line change I could do to edit gpedit?
> >
> > "Steven L Umbach" wrote:
> >
> >> Are these computers part of an Active Directory domain?? If they are you
> >> should be able to use Group Policy. Look at user configuration/Windows
> >> settings/Internet Explorer maintenance/URLs - important URL's. Also see
> >> the
> >> link below on IE maintenance processing. --- Steve
> >>
> >> http://www.sysinternals.com/Utilities/PsShutdown.html
> >>
> >> "AmyAmandaAllen" <AmyAmandaAllen@discussions.microsoft.com> wrote in
> >> message
> >> news:E4CD8AF7-B952-44FD-973A-FE894176FF58@microsoft.com...
> >> > Hi,
> >> >
> >> > At work we have a set homepage in IE which is now unadjustable as we
> >> > have
> >> > installed group policy on each machine. Now our directors have decided
> >> > to
> >> > change their mind ( management ) which would need us to manually visit
> >> > each
> >> > site ( all 40 of em ) and change every machines homepage and disable
> >> > group
> >> > policy etc. A big headache . Is their any way to create a script or
> >> > something very similar which we can just send out to our employees on
> >> > site?
> >> >
> >> > Thanks
> >>
> >>
> >>

>
>
>

Reply With Quote
  #6  
Old 01-05-2006, 05:06 AM
Steven L Umbach
 
Posts: n/a
Default Re: Lockdown GPO issue

Well not using an Active Directory domain is a huge downside to managing
Group Policy. What you could try is to configure GP the way you want on one
computer and then copy the \Windows\system32\group
policy\user\Microsoft\IEAK folder to other computers you want to change.
That should change that setting in Local Group Policy but it may not refresh
right away though you could try using gpudate /force to do that. You may
also be able to remotely manage Group Policy on other computers using the
mmc snapin for Group Policy and browse or enter the name of the target
computer assuming you have proper network connectivity and are a local
administrator on the target computer if that would help at all. --- Steve



"AmyAmandaAllen" <AmyAmandaAllen@discussions.microsoft.com> wrote in message
news:6F4B1820-F77F-493B-90A0-C2B31FC0F720@microsoft.com...
> that worked in a sense many thanks.
>
> unfortunatly grouppolict is enabled on these pc's and therefor prevents me
> from temporarily disabling the policy in place that lets me edit the
> registry. Any ideas how to automate this? Save outr users lots of hassle.
>
> Thanks again
>
>
>
> "Steven L Umbach" wrote:
>
>> Well in that case for that setting you could try a .reg file that would
>> look
>> like the following where you would want to of course modify for the
>> actual
>> webpage. You could copy into notepad and save with a .reg extension.
>> Then
>> on a test computer try clicking the .reg file to see if it works for the
>> users. --- Steve
>>
>> http://support.microsoft.com/default.aspx?kbid=310516 --- info on
>> using
>> reg files.
>>
>> Windows Registry Editor Version 5.00
>>
>> [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
>> "Start Page"="http://www.mypage.com/"
>>
>>
>> "AmyAmandaAllen" <AmyAmandaAllen@discussions.microsoft.com> wrote in
>> message
>> news:74A17A81-C3C7-4C03-BD1D-850A7F50EC44@microsoft.com...
>> > hi,
>> >
>> > no these are either standalone or small workgroups.
>> >
>> > Have found what I need to set in group policy but wondering if theres a
>> > command line change I could do to edit gpedit?
>> >
>> > "Steven L Umbach" wrote:
>> >
>> >> Are these computers part of an Active Directory domain?? If they are
>> >> you
>> >> should be able to use Group Policy. Look at user configuration/Windows
>> >> settings/Internet Explorer maintenance/URLs - important URL's. Also
>> >> see
>> >> the
>> >> link below on IE maintenance processing. --- Steve
>> >>
>> >> http://www.sysinternals.com/Utilities/PsShutdown.html
>> >>
>> >> "AmyAmandaAllen" <AmyAmandaAllen@discussions.microsoft.com> wrote in
>> >> message
>> >> news:E4CD8AF7-B952-44FD-973A-FE894176FF58@microsoft.com...
>> >> > Hi,
>> >> >
>> >> > At work we have a set homepage in IE which is now unadjustable as we
>> >> > have
>> >> > installed group policy on each machine. Now our directors have
>> >> > decided
>> >> > to
>> >> > change their mind ( management ) which would need us to manually
>> >> > visit
>> >> > each
>> >> > site ( all 40 of em ) and change every machines homepage and disable
>> >> > group
>> >> > policy etc. A big headache . Is their any way to create a script or
>> >> > something very similar which we can just send out to our employees
>> >> > on
>> >> > site?
>> >> >
>> >> > Thanks
>> >>
>> >>
>> >>

>>
>>
>>



Reply With Quote
  #7  
Old 01-05-2006, 05:06 AM
AmyAmandaAllen
 
Posts: n/a
Default Re: Lockdown GPO issue

Ive sorted it now - thanks for the assist!

MERRY CHRISTMAS !!

"Steven L Umbach" wrote:

> Well not using an Active Directory domain is a huge downside to managing
> Group Policy. What you could try is to configure GP the way you want on one
> computer and then copy the \Windows\system32\group
> policy\user\Microsoft\IEAK folder to other computers you want to change.
> That should change that setting in Local Group Policy but it may not refresh
> right away though you could try using gpudate /force to do that. You may
> also be able to remotely manage Group Policy on other computers using the
> mmc snapin for Group Policy and browse or enter the name of the target
> computer assuming you have proper network connectivity and are a local
> administrator on the target computer if that would help at all. --- Steve
>
>
>
> "AmyAmandaAllen" <AmyAmandaAllen@discussions.microsoft.com> wrote in message
> news:6F4B1820-F77F-493B-90A0-C2B31FC0F720@microsoft.com...
> > that worked in a sense many thanks.
> >
> > unfortunatly grouppolict is enabled on these pc's and therefor prevents me
> > from temporarily disabling the policy in place that lets me edit the
> > registry. Any ideas how to automate this? Save outr users lots of hassle.
> >
> > Thanks again
> >
> >
> >
> > "Steven L Umbach" wrote:
> >
> >> Well in that case for that setting you could try a .reg file that would
> >> look
> >> like the following where you would want to of course modify for the
> >> actual
> >> webpage. You could copy into notepad and save with a .reg extension.
> >> Then
> >> on a test computer try clicking the .reg file to see if it works for the
> >> users. --- Steve
> >>
> >> http://support.microsoft.com/default.aspx?kbid=310516 --- info on
> >> using
> >> reg files.
> >>
> >> Windows Registry Editor Version 5.00
> >>
> >> [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
> >> "Start Page"="http://www.mypage.com/"
> >>
> >>
> >> "AmyAmandaAllen" <AmyAmandaAllen@discussions.microsoft.com> wrote in
> >> message
> >> news:74A17A81-C3C7-4C03-BD1D-850A7F50EC44@microsoft.com...
> >> > hi,
> >> >
> >> > no these are either standalone or small workgroups.
> >> >
> >> > Have found what I need to set in group policy but wondering if theres a
> >> > command line change I could do to edit gpedit?
> >> >
> >> > "Steven L Umbach" wrote:
> >> >
> >> >> Are these computers part of an Active Directory domain?? If they are
> >> >> you
> >> >> should be able to use Group Policy. Look at user configuration/Windows
> >> >> settings/Internet Explorer maintenance/URLs - important URL's. Also
> >> >> see
> >> >> the
> >> >> link below on IE maintenance processing. --- Steve
> >> >>
> >> >> http://www.sysinternals.com/Utilities/PsShutdown.html
> >> >>
> >> >> "AmyAmandaAllen" <AmyAmandaAllen@discussions.microsoft.com> wrote in
> >> >> message
> >> >> news:E4CD8AF7-B952-44FD-973A-FE894176FF58@microsoft.com...
> >> >> > Hi,
> >> >> >
> >> >> > At work we have a set homepage in IE which is now unadjustable as we
> >> >> > have
> >> >> > installed group policy on each machine. Now our directors have
> >> >> > decided
> >> >> > to
> >> >> > change their mind ( management ) which would need us to manually
> >> >> > visit
> >> >> > each
> >> >> > site ( all 40 of em ) and change every machines homepage and disable
> >> >> > group
> >> >> > policy etc. A big headache . Is their any way to create a script or
> >> >> > something very similar which we can just send out to our employees
> >> >> > on
> >> >> > site?
> >> >> >
> >> >> > Thanks
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>

>
>
>

Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
SUS 1.0/SP1 Approval Analyzer Tool Issue Bobbie Harder \(MSFT\) Windows Update 0 01-05-2006 05:13 PM
IE Browser Connectivity Issue - (TCP/IP + Winsock) Quenal Windows XP Network Web 0 01-05-2006 04:05 AM
Login Issue 1xnyer Windows XP Network Web 0 01-05-2006 04:01 AM
Re: startup issue.... aaauuggghhhh Frank Windows XP General 1 01-05-2006 02:31 AM
/$Mft issue, doesn't appear to be drive NewbieSupreme Windows XP Basics 2 01-05-2006 02:07 AM


All times are GMT. The time now is 03:43 AM.


Powered by vBulletin Version 3.5.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd. SEO by vBSEO 2.3.2 © 2005, Crawlability, Inc.

Lockdown GPO issue