GP Editor on XP vs 2000

It is.  I also recall having this option when I was using W2K Prof with the admin tools installed, but not positive on that.

Rob,

Here's what I think it is...

When you look at your Local Security Settings in Windows XP, it is showing you the local deafult GPO (Group Policy Object) for that machine.  Since the XP Pro machine isn't managing log ons for the network, you only have settings that are specific to that particular computer and not settings that could be implemented across the network.

When you look at the settings on the Windows 2000 Server, it's a domain controller, so its default GPOs (and any that you create) are geared towards Active Directory.  So, you have all kinds of options, such as startup, logon, logoff and shutdown scripts.  Alot of those settings would have little or no impact if applied to the server itself, but when applied to an OU, Site or Domain in Active Directory, those settings would impact every computer in the container.

On the Win2K Pro machine, I'm assuming it was a member of the domain.  With the admin tools installed and logged on as a Domain Admin, it would most likely default to connecting to domain GPOs and I think that's why you probably saw all those settings there.

If you're not really familiar with Group Policy, a really good resource for Group Policy is http://www.gpanswers.com.  If you go to http://www.gpanswers.com/webinars, they have some really good tutorials and stuff.

Hope that helps.

<-=+=->

What if I have the administration tools loaded on my XP Professional and I'm a domain admin?  Shouldn't I still see the user logon stuff?  I can see the computer logon section.

I'd hate to have to RDP to the server to manage a GP because I can't see the settings on my XP machine.

You won't.  Just manage them through Active Directory Users & Computers.  Right-click on the container (Domain or OU... for Sites, use Active Directory Sites & Services), select "Properties" and click on the "Group Policy" tab.  Or, you can manage them through the Group Policy Managment Console, which is pretty slick.  Download it at http://www.microsoft.com/downloads/details.aspx?FamilyId=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en and then install it.  That download, by the way, include Service Pack 1 for GPMC.

<-=+=->

I'm already using the GPMC.  I'm baffled by this one.

Did you right-click on Group Policy Management, select Add Forest... and then put in your domain?

<-=+=->

Also:

1. Is the computer a member of the domain?
2. Are you logged in with a Domain Admins account?

<-=+=->

In GMPC, I can see my forest and my single domain (only have 1).  I can see all the GPO's and where they are linked .  And I can manage all of them.  I'm on a WinXP Pro box which is a member of the domain.  I'm logged on as a Domain Admin.

It's just that one section that doesn't give me all the options.  This is in:
User Configuration\Windows Settings.  The only subtree I have is:
 Remote Installation Services.

If I open this on a W2k box,under User Configuration\Windows Settings I have:
 Internet Explorer Maintenance
 Scripts (Logon/Logoff)
 Security Settings
 Remote Installation Services
 Folder Redirection


Thanks for sticking with this one.  I'm interested in any thoughts you may have, on this subject anyway.  ;)

Wow.  Sounds to me like it's not working right.  :)

Let me get on an XP box in the domain and I'll try it out.  Back in a sec.

And, don't kid yourself.  You're interested in *all* my thoughts.  :D

<-=+=->

Okay, apparently when I said "Back in a sec", what I reallly meant was "I'm going to get distracted by an issue on a customer network, then go home and forget about this until sometime tomorrow night."

Sorry for the delay....

I booted up my Win2K3 Server in Virtual PC and then joined my Windows XP Pro Virtual PC to its domain.  I installed the GPMC on the XP Pro box and fired it up (after logging on as a Domain Admin).

I think you're going to kick yourself on this one.  I was looking in the right-hand window pane and saw the exact same thing that you did.  What I was expecting was what you were describing on your Win2K box.  What I did was right-clicked on the policy in the left window pane and selected "Edit".  That brings up all the settings that you were talking about.

Hope this is the solution for you.

<-=+=->

If I right-click the Policy name in the left hand pane, and choose Edit, it brings up the Group Policy MMC.  In there, I do not have the User Configuration\Windows Settings\Logon script stuff.  Are you saying that you do?

No, I don't.  I'm going to uninstall all of my management tools and reinstall them.  Odd.

I don't know what in the world is going on here.  I uninstalled the GPMC and the Admin Pack.  Reboot.  Reinstalled.  Same thing.  I'm going to check it out on another computer....

That is odd.

The only thing that I can think of:

1. Make sure you're a Domain Admin in the domain (which you've already done).
2. Check your Event Logs and see if there is some sort of error where your machine can't access a GUID or part of the GPO (something regarding the SYSVOL folder, perhaps)?

It almost seems to me like you can't access the part of the GPO that has user options.  I think that it's still the NTUSER.DAT file, but I'm not sure.  I don't have any of my references handy.

<-=+=->

I wonder if it's a dll or some other file that contains the GP structure that isn't getting installed properly.  Haven't had a change to test on another WinXP box, but I'll post back when I do.  Thanks for your continued help.

Well, it's definitely my computer.  I tested it on another WinXP box here and it works fine.  If I ever figure out what it is, I'll post back.  Thanks.

-r

Well, thanks for the points, but I really don't feel like I accomplished anything.

One thing that you might want to try is deleting your profile and recreating it.  I don't know why I'm thinking that, but I am.

<-=+=->