Display settings in win2k group policy

Posted on 2004-09-25
Last Modified: 2010-04-14
I want to apply a group policy to my win2k domain that stops users playing around with displays, scrensavers, themes and items.  I know how to enable the group policy and how to restrcit access to the various items, what I am having difficulties is finding  a way of remotley changing all the displays to no display (change back to the windows default display) without walking around to every machine.

Anybody have any idea's?
Question by:cabland
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3

Expert Comment

ID: 12151772
Do you use roaming profiles? If so, you can rename the NTUSER.DAT files to NTUSER.MAN files. This will make the settings of that profile mandatory.

Expert Comment

ID: 12152137
Well, I was able to change it using Windows XP SP2. Basically what you will need to do is run Active Directory Users & Computers from a WinXP box (don't know if it has to be SP2 or not, but that is what I have and it works). You may have to load the AdminPak if you haven't already (let me know if you need a link to it). Go to the following policy:

User Settings \ Administrative Templates \ Control Panel \ Display \ Desktop Themes

The last policy down there is "Load a specific visual style file or force Windows Classic". That is what you want to set. Look at the explanation tab for info on how to set it to what you want.

NOTE: This is not in Windows 2000 by default, but you will see it in AD Users & Computers from Win2k AFTER you have connected once from a WinXP machine.

Author Comment

ID: 12167246
CDOP, there are no roaming profiles in use.

DanGilbertX, can you post a link to the Adminpak please.

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.


Author Comment

ID: 12169741
Do I need to be logged onto the domain as the domain admin?  The option to edit the group policy is greyed out?

Accepted Solution

DanGilbertTX earned 100 total points
ID: 12169865
Yes, you will need to be a domain admin or at least be delegated authority to manage the OU you are applying the Group Policy to. You don't necessarily have to login to the machine as a domain admin. The easy way to do it is to use the RunAs functionality. For that, just do SHIFT + RIGHT CLICK on Active Directory Users & Computers and the second option will be RunAs. Click on that and then put in the credentials that have the rights to apply Group Policy to the domain in the bottom box there. That will start up ADU&C as that username. Note, you can do this for any program/shortcut except for Explorer.

Author Comment

ID: 12169908
cracked it, points are yours DanGilbertTX

Expert Comment

ID: 12170004
Thanks. Glad you got it working.

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In this post we will be converting StringData saved within a text file into a hash table. This can be further used in a PowerShell script for replacing settings that are dynamic in nature from environment to environment.
This video Micro Tutorial shows how to password-protect PDF files with free software. Many software products can do this, such as Adobe Acrobat (but not Adobe Reader), Nuance PaperPort, and Nuance Power PDF, but they are not free products. This vide…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor ( Top Charts is a view in which you can set seve…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question