Solved

Group Policy

Posted on 2004-04-15
11
492 Views
Last Modified: 2013-12-04
I created a group policy to restrict a particular group of users from web email, such as yahoo, aol, hotmail.  The policy somehow trickled to other users and computers.
I removed and deleted the policy but alot of my users are still restricted from web email, few computers allow web email access but most of them restrict it.  How can I undo this?
0
Comment
Question by:manch03
11 Comments
 
LVL 12

Expert Comment

by:trywaredk
ID: 10833768
Policy is done through Organisational Units (OU) in Active Directory

If you want to activate a special set of policies to certain group of computers or users, you should create a new OU for this group, and move the certain group of user or computers objects to this OU, and create the policy on this new OU

Domain Security Policy in Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;EN-US;221930

Troubleshooting Group Policy in Windows 2000
http://www.microsoft.com/windows2000/techinfo/howitworks/management/gptshoot.asp

Local Group Policy Settings Do Not Take Effect
http://support.microsoft.com/default.aspx?scid=kb;en-us;220862

Gpotool.exe: Group Policy Verification Tool
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/gpotool-o.asp

Does windows2000 has security monitoring to know if somebody's overriding my group policy (GPO):
http://www.experts-exchange.com/Security/Win_Security/Q_20606772.html

Using Secedit.exe to Force Group Policy (GPO) to Be Applied Again in Windows 2000:
http://support.microsoft.com/default.aspx?scid=kb;en-us;227448

Gpupdate - Refreshes local and Active Directory-based Group Policy settings in Windows XP
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/refrgp.mspx

Refresh policy from windows 2000 server:
1. Start / Run
2. CMD / ENTER
3. SECEDIT /REFRESHPOLICY MACHINE_POLICY /ENFORCE
4. SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE
5. EXIT

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open
0
 
LVL 12

Expert Comment

by:trywaredk
ID: 10833770

HOW TO: Restrict Users from Running Specific Windows Programs in Windows 2000
http://support.microsoft.com/?kbid=323525

Description of the Software Restriction Policies in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;310791

0
 
LVL 12

Expert Comment

by:trywaredk
ID: 10833773

rsop.msc - HOW TO: Install and Use Resultant Set of Policy Logging in Windows Server 2003
http://support.microsoft.com/default.aspx?scid=kb;en-us;323276

rsop.msc - How to Use Resultant Set of Policy Logging in Windows 2003 Server:
http://support.microsoft.com/default.aspx?scid=kb;en-us;312321

Group Policy Results - Displays information about the Group Policy on the current computer and logged-on user.
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/gpresult-o.asp

0
 

Author Comment

by:manch03
ID: 10833812
I do not understand why very few machines will allow web email but the majority will not.  I want web email allowed now and cannot figure how to reverse the restriction other than deleting the group policy which I did.

Thank you
0
 
LVL 83

Expert Comment

by:oBdA
ID: 10834899
Well, how did you deny the web email access? AFAIK, there's no native GPO setting to prevent access to certain web sites; did you use a custom template file?
0
Give your grad a cloud of their own!

With up to 8TB of storage, give your favorite graduate their own personal cloud to centralize all their photos, videos and music in one safe place. They can save, sync and share all their stuff, and automatic photo backup helps free up space on their smartphone and tablet.

 
LVL 12

Expert Comment

by:trywaredk
ID: 10854564
Maybe it's not a policy that's doing the restrictions ???

Cleaning your computer  - and protecting it in the future -  can't be answered with one issue.

As you can see in my url below there are at least 7 different issues, where you should decide 1 of each, or else you does'nt protect your computer at all.

The reason is, that the many different programs not always protects against each other, and each of them does'nt protect equally.

It's very important, that you study all of these issues in my knowledgebase (some of them are freeware):
http://www.tryware.dk/English/Knowledgebase/HowToProtectYourComputer.html

BTW: I'm using the Trend Micro virus-suite, and SoftScan , and haven't got any of my servers or computers infected since 1999.

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open
0
 

Author Comment

by:manch03
ID: 10877678
The policy was created in group policy Active Directory windows 2000 server.  Created a new policy and went to user configuration - windows settings  - internet explorer maintenance - security - security zones and content ratings -  security zones and privacy - modify settings - restricted sites - added the   aol.com   hotmail.com  yahoo.com  - and applied this  group policy to an OU.  The problem is the policy applied across the network to all OU's even though it was only applied to Middle school students.  How do I get rid of it?  I have removed the policy from the ou, but it is still restricting users across the network.
0
 

Author Comment

by:manch03
ID: 10877929
Never mind - I fixed the problem.  I created another gp and applied to all workstations across the network and then enforced the group policy refresh. It is now working.
0
 
LVL 12

Expert Comment

by:trywaredk
ID: 10882480
http://www.experts-exchange.com/Security/Win_Security/help.jsp - hi9

BTW: Does windows2000 has security monitoring to know if somebody's overriding my group policy (GPO):
http://www.experts-exchange.com/Security/Win_Security/Q_20606772.html
0
 
LVL 1

Accepted Solution

by:
DarthMod earned 0 total points
ID: 11474757
PAQed, with points refunded (250)

DarthMod
Community Support Moderator
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
Users of Windows 10 Professional can disable automatic reboots using the policy editor. This tool is not included in the Windows home edition. But don't worry! Follow the instructions below to install (a Win7) policy editor on your Windows 10 Home e…
This Micro Tutorial will teach you how to censor certain areas of your screen. The example in this video will show a little boy's face being blurred. This will be demonstrated using Adobe Premiere Pro CS6.
In this video I am going to show you how to back up and restore Office 365 mailboxes using CodeTwo Backup for Office 365. Learn more about the tool used in this video here: http://www.codetwo.com/backup-for-office-365/ (http://www.codetwo.com/ba…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now