Manuals / Microsoft / Computer Equipment / Server

Microsoft Windows NT 4.0 manual The System Policy Editor

Models: Windows NT 4.0

1 104

Download 104 pages 4.81 Kb

Page 47

THE SYSTEM POLICY EDITOR

THE SYSTEM POLICY EDITOR

The System Policy Editor is a graphical tool that allows you to easily update the registry settings to implement a System Policy. The System Policy Editor is included with Windows NT Server 4.0, but you can install it on Windows NT Workstation-based machines and on Windows 95-based machines as well.

Note that a policy file is valid only for the platform on which it was created. For example, if you run Poledit.exe on a Windows 95-based machine, and you save the policy file, the file will be written in a format that can be interpreted by Windows 95-based machines only. The same is true when you create policy files on Windows NT-based machines. As a result, Windows 95 and Windows NT policy files are not interchangeable.

After you complete the installation, the administrative tools group includes the System Policy Editor.

Installing the System Policy Editor on a Windows NT Workstation

You have two options when installing the System Policy Editor on a Windows NT Workstation-based computer. You can

∙Run the Setup.bat file from the Windows NT 4.0 CD-ROM \Clients\Svrtools\Winnt directory, or

∙Copy the System Policy Editor executable, Poledit.exe, and template files to the workstation. The template files have an .adm extension, and are lo- cated in the %systemroot%\INF directory, which is hidden by default.

Installing the System Policy Editor on a Windows 95 Computer

When you install the System Policy Editor on a Windows 95-based computer, the installation process modifies the Windows 95 registry to allow system poli- cies to function correctly. You can install the policy editor from the Windows 95 Upgrade or Retail compact disc, or you can install the editor that ships with Windows NT Server 4.0.

To install the System Policy Editor from the Windows 95 compact disc:

1.Insert the Windows 95 Upgrade compact disc in your CD-ROM drive.

2.Open Control Panel, and click Add/Remove Programs.

3.Click the Windows Setup tab, and select Have Disk.

Microsoft Windows NT Server White Paper

39

Image 47

Microsoft Windows NT 4.0 manual The System Policy Editor, Installing the System Policy Editor on a Windows NT Workstation

Contents

White Paper Guide to Microsoft Windows NT 4.0 Profiles and Policies Server Operating System0997 1997 Microsoft Corporation. All rights reservedMicrosoft Corporation One Microsoft Way Redmond, WA 98052-6399 USA Abstract Page Creating and Maintaining User Profiles CONTENTSIntroduction Establishing User Profiles - An OverviewTemplates Registry Keys Modified by the System Policy Editor DefaultSystem Policy - An Introduction The System Policy EditorPrinter Browse Thread Server Scheduler Error Beep Start Menu Shut Down Command Saved Settings Registry Editing ToolsWelcome Tips Default Computer Settings Remote Update Communities Permitted Managers Public Community Traps Run CommandRegistry Entries Not Included in the System Policy Editor Appendix A -FlowchartsFor More Information Appendix C - Usage NotesTCO and the User Profiles, Policies, and the Zero Administration KitINTRODUCTION 2 Microsoft Windows NT Server White Paper What are User Profiles and System Policies?Before You Begin Directory Replication systemroot% Technical NotesRoaming User System PolicyUser Profile Structure Creating and Administering User ProfilesESTABLISHING USER PROFILES - AN OVERVIEW The NTuser.dat file contains the following configuration settings Windows NT 4.0 file Windows NT 4.0 and Windows User Profile DifferencesUser Profile Planning and Implementation To change encoded User Profile information There are three methods to correct this Working Around Slow Network Links 3. Delete the network connection and reconnectTo create a new roaming user profile CREATING AND MAINTAINING USER PROFILESCreating a New Roaming User Profile for Windows NT e Continue to Step 14 Microsoft Windows NT Server White Paper ∙ To copy an existing user’s profile to another user∙ To copy a template profile manually to a number of users To create a new mandatory User Profile Creating a New Mandatory User Profile for Windows NT16 Microsoft Windows NT Server White Paper called TemplateUserMaking a Roaming Profile Mandatory in Windows NT pdm, and will check again Creating a New Roaming User Profile for a Windows 95 User To create a mandatory user profile for a Windows 95 user Creating a New Mandatory User Profile for WindowsMaintaining User Profiles with Control Panel System Properties Deleting Profiles ddays See the Windows NT Server Resource Kit for more informationc\\computername Valid profile types are will open to the profile directory used by that account Viewing the Contents of the Profiles Directory on a Local Computer 26 Microsoft Windows NT Server White Paper Log Files Used by ProfilesThe All Users Shared Profile systemroot%\Profiles\All Users\Start Menu\Programs Default User Template ProfilesProfile Names and Storage in the Registry Manually Administering a User Profile through the Registry process. For this reason, we recommend that you use the user name \%systemroot%\Profiles\Default User\Desktop30 Microsoft Windows NT Server White Paper Extracting a User Profile for Use on Another Domain or Machine Creating Profiles Without User-Specific Connections Troubleshooting User Profiles with the UserEnv.log File Sample Log System Policy Files SYSTEM POLICY - AN INTRODUCTIONHow Policies Are Applied Policy ReplicationAdditional Implementation Considerations ∙ What type of restrictions do you want to impose on users? THE SYSTEM POLICY EDITOR Installing the System Policy Editor on a Windows NT WorkstationInstalling the System Policy Editor on a Windows 95 Computer System Policy Editor Template .Adm Files Updating the Registry with the System Policy EditorTo install the System Policy Editor from a Windows NT 4.0 Server Your Own Custom .Adm File,”later in this document Creating a System Policy tem Policy Editor Creating Alternate Folder Paths Deploying Policies for Windows NT 4.0 Machines 3. In the Update mode box, select Manual use specific path Deploying Policies for Windows 95 MachinesModifying Policy Settings on Stand-Alone Workstations Creating a Custom .Adm File To close the category after filling in the options, you would use KEYNAME System\CurrentControlSet\Services\ LanManServer\Parameters3. Choose the CLASS in which you want your custom entries to appear would useChecked REGDWORD with a value of VALUENAME ValueToBeChanged VALUEON “Turned On” VALUEOFF “Turned Off” PART !!MyPolicy NUMERIC DEFAULT VALUENAME ValueToBeChanged END PARTPART !!MyPolicy EDITTEXT EXPANDABLETEXT VALUENAME ValueToBeChanged MAXLEN 4 END PARTClearing the Documents Available List Configuring System Policies Based on Geographic LocationBuilding Fault Tolerance for Custom Shared Folders will refer the client to multiple servers for the same path. For example, on a Dfs server, the administrator has defined that users connecting to the UNC path \\Dfsserver\Dfsshare\Customfolder, will be returned a response with three dif- ferent servers, \\Server1\Customerfolder, \\Server2\Customerfolder, and \\Server3\Customerfolder, all of which contain the same data. The client ma- chine, which can be either a Windows NT-based 4.0 machine or a Wallpaper REGISTRY KEYS MODIFIED BY THE SYSTEM POLICY EDITOR DEFAULT TEMPLATESDefault User Settings Control Panel Display Applicationcan start unauthorized applications. To further restrict the Start Menu Run CommandSettings Folders Color Scheme56 Microsoft Windows NT Server White Paper Settings TaskbarStart Menu Find Command NoDrives My Computer Drive IconsNetwork Neighborhood Icon Network Neighborhood Display58 Microsoft Windows NT Server White Paper Network Neighborhood Workgroup ContentsStart Menu Shut Down Command Desktop DisplayRegistry Editing Tools Saved Settingsremove the user’s name from the “Shut down the system” 60 Microsoft Windows NT Server White Paper Windows Applications Restrictionsplaying the folders, files, and shortcuts the user receives Custom Programsuser selects Programs from the Start menu. The user’s Custom Desktop Icons62 Microsoft Windows NT Server White Paper Custom Startup FolderCustom Network Neighborhood Shell Extensions Custom Start MenuStart Menu Common Program Groups Disables the display of common groups when the userExplorer File Menu Removes the File option from Explorer’s toolbar. ThisRemove the Map Network Drive and Disconnect Net Explorer Context MenuNetwork Connections Determines whether the shell waits for the logon script to When enabled, link file tracking uses the configured pathWhen this value is 1, the environment variables declared shown in properties for the shortcut to an application inTask Manager Enables or disables the user’s ability to start Task Manwhen the user logs on for the first and second time. This group are started. If this value is also set in the ComputerCommunities Default Computer SettingsRemote Update Permitted managers CategorySubcategory SelectionDrive Shares - Workstation Run CommandWhen enabled, creates administrative shares for physical Printer Browse Thread ministrators the ability to control this feature. This settingDrive Shares - Server physical drives. These shares were created automaticallyAuthentication Time Limit Error BeepEnables beeping every 10 seconds when a remote job Authentication RetriesRAS Auto-disconnect SelectionWait interval for callbackSelectionAuto disconnect RAS Call-back Interval74 Microsoft Windows NT Server White Paper Shared Programs Folder PathShared Desktop Icons Path Shared Start Menu PathLogon Banner Shared Startup Folder PathBefore the user logs on, displays a custom dialog box Enable shutdown from Authentication dialog boxEnables or disables the Shut Down button on the logon name when the user presses CTRL+ALT+DEL and theCategory Cached Roaming Profiles Read Only Files - Last Access TimeDo not update last access time For files that are only to be read, specifies do not updateDialog Box Timeout SelectionSlow network connection timeoutSelectionTimeout for dialog boxes Slow Network Timeout80 Microsoft Windows NT Server White Paper onds in hexadecimal. Decimal = 0-600 default =Show REGDWORD Off = 0 or value is removed On = time in secStart Banner REGISTRY ENTRIES NOT INCLUDED IN THE SYSTEM POLICY EDITORAutorun Description 0 = enabled 1= disabledRegistry Value Registry DataFOR MORE INFORMATION 84 Microsoft Windows NT Server White Paper APPENDIX A - FLOWCHARTSUser Profile Flowcharts Begin Profile Process Does the 86 Microsoft Windows NT Server White Paper Flowchart 2. User Logon PartSet USERPROFILE environment variable Check build number for version Continued from Command to Load Profile Load the User ProfileApply System Policy Save settings to Registry Flowchart 3. User Logon Part88 Microsoft Windows NT Server White Paper Flowchart 4. User Logon - Accessing Server-based ProfileSystem Policy Flowchart Existing Windows NT 3.5x Roaming Profile APPENDIX B - IMPLEMENTING USER PROFILESExisting Windows NT 3.5x Roaming Profile ∙ User action To automatically upgrade the profile, log on to theCreating a New Windows NT 4.0 Mandatory Profile Creating a New Windows NT 4.0 Roaming Profile92 Microsoft Windows NT Server White Paper Updating and Changing a Roaming Profile to a Mandatory ProfileChanging a Roaming Profile to a Mandatory Profile Regarding User Logons and User Logoffs Important Information for AdministratorsRecent Updates to Profiles Since Retail Release APPENDIX C - USAGE NOTES94 Microsoft Windows NT Server White Paper Recent Updates to Policies Since Retail ReleasePolicies APPENDIX D - RELATED KNOWLEDGE BASE ARTICLESProfiles Q155956 Windows NT 4.0 Policy Restriction Error at LogonCannot Restore Default Setting for Shutdown Button Q156432