manch03
asked on
Group Policy
I created a group policy to restrict a particular group of users from web email, such as yahoo, aol, hotmail. The policy somehow trickled to other users and computers.
I removed and deleted the policy but alot of my users are still restricted from web email, few computers allow web email access but most of them restrict it. How can I undo this?
I removed and deleted the policy but alot of my users are still restricted from web email, few computers allow web email access but most of them restrict it. How can I undo this?
HOW TO: Restrict Users from Running Specific Windows Programs in Windows 2000
http://support.microsoft.com/?kbid=323525
Description of the Software Restriction Policies in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;310791
rsop.msc - HOW TO: Install and Use Resultant Set of Policy Logging in Windows Server 2003
http://support.microsoft.com/default.aspx?scid=kb;en-us;323276
rsop.msc - How to Use Resultant Set of Policy Logging in Windows 2003 Server:
http://support.microsoft.com/default.aspx?scid=kb;en-us;312321
Group Policy Results - Displays information about the Group Policy on the current computer and logged-on user.
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/gpresult-o.asp
ASKER
I do not understand why very few machines will allow web email but the majority will not. I want web email allowed now and cannot figure how to reverse the restriction other than deleting the group policy which I did.
Thank you
Thank you
Well, how did you deny the web email access? AFAIK, there's no native GPO setting to prevent access to certain web sites; did you use a custom template file?
Maybe it's not a policy that's doing the restrictions ???
Cleaning your computer - and protecting it in the future - can't be answered with one issue.
As you can see in my url below there are at least 7 different issues, where you should decide 1 of each, or else you does'nt protect your computer at all.
The reason is, that the many different programs not always protects against each other, and each of them does'nt protect equally.
It's very important, that you study all of these issues in my knowledgebase (some of them are freeware):
http://www.tryware.dk/English/Knowledgebase/HowToProtectYourComputer.html
BTW: I'm using the Trend Micro virus-suite, and SoftScan , and haven't got any of my servers or computers infected since 1999.
Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark
:o) Your brain is like a parachute. It works best when it's open
Cleaning your computer - and protecting it in the future - can't be answered with one issue.
As you can see in my url below there are at least 7 different issues, where you should decide 1 of each, or else you does'nt protect your computer at all.
The reason is, that the many different programs not always protects against each other, and each of them does'nt protect equally.
It's very important, that you study all of these issues in my knowledgebase (some of them are freeware):
http://www.tryware.dk/English/Knowledgebase/HowToProtectYourComputer.html
BTW: I'm using the Trend Micro virus-suite, and SoftScan , and haven't got any of my servers or computers infected since 1999.
Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark
:o) Your brain is like a parachute. It works best when it's open
ASKER
The policy was created in group policy Active Directory windows 2000 server. Created a new policy and went to user configuration - windows settings - internet explorer maintenance - security - security zones and content ratings - security zones and privacy - modify settings - restricted sites - added the aol.com hotmail.com yahoo.com - and applied this group policy to an OU. The problem is the policy applied across the network to all OU's even though it was only applied to Middle school students. How do I get rid of it? I have removed the policy from the ou, but it is still restricting users across the network.
ASKER
Never mind - I fixed the problem. I created another gp and applied to all workstations across the network and then enforced the group policy refresh. It is now working.
https://www.experts-exchange.com/Security/Win_Security/help.jsp - hi9
BTW: Does windows2000 has security monitoring to know if somebody's overriding my group policy (GPO):
https://www.experts-exchange.com/questions/20606772/Does-windows2000-has-security-monitoring-to-know-if-somebody's-overriding-my-group-policy.html
BTW: Does windows2000 has security monitoring to know if somebody's overriding my group policy (GPO):
https://www.experts-exchange.com/questions/20606772/Does-windows2000-has-security-monitoring-to-know-if-somebody's-overriding-my-group-policy.html
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
If you want to activate a special set of policies to certain group of computers or users, you should create a new OU for this group, and move the certain group of user or computers objects to this OU, and create the policy on this new OU
Domain Security Policy in Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;EN-US;221930
Troubleshooting Group Policy in Windows 2000
http://www.microsoft.com/windows2000/techinfo/howitworks/management/gptshoot.asp
Local Group Policy Settings Do Not Take Effect
http://support.microsoft.com/default.aspx?scid=kb;en-us;220862
Gpotool.exe: Group Policy Verification Tool
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/gpotool-o.asp
Does windows2000 has security monitoring to know if somebody's overriding my group policy (GPO):
https://www.experts-exchange.com/questions/20606772/Does-windows2000-has-security-monitoring-to-know-if-somebody's-overriding-my-group-policy.html
Using Secedit.exe to Force Group Policy (GPO) to Be Applied Again in Windows 2000:
http://support.microsoft.com/default.aspx?scid=kb;en-us;227448
Gpupdate - Refreshes local and Active Directory-based Group Policy settings in Windows XP
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/refrgp.mspx
Refresh policy from windows 2000 server:
1. Start / Run
2. CMD / ENTER
3. SECEDIT /REFRESHPOLICY MACHINE_POLICY /ENFORCE
4. SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE
5. EXIT
Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark
:o) Your brain is like a parachute. It works best when it's open