Modifying Policy Settings on Stand-Alone Workstations

If you need to modify settings of a Windows NT 4.0-based workstation user who is not a member of the domain and thus will not be able to use the policy file located on the domain, you have three options available to you:

You can create a policy file for stand-alone workstations where users log on locally, or

You can change policy settings remotely, or

You can change policy settings locally.

Procedures for each option are described next. Note that you must have administrator rights to the stand-alone workstations in question.

To create a policy file for stand-alone workstations:

1.Log on as administrator, and create a policy file that includes Computer and User objects with appropriate settings for the computer and users re- spectively. The user objects may include the Default User or user accounts from the local workstation, but global group objects will be ig- nored if added to the policy file. Windows NT recognizes machine-specific policy settings for the computer if those are specified in the policy file.

2.Place the policy file in a secure directory on the stand-alone computer or on a network share to which the user has at least Read permissions.

3.In the workstation registry, locate the UpdateMode value in the following key:

HKEY_LOCAL_MACHINE \SYSTEM \CurrentControlSet

\Control

\Update

4.Update the data to a hex value of 2.

5.In the same registry subkey, modify the NetworkPath value with the local or UNC path where the policy file resides. If this path does not exist, add it as a data type of REG_SZ. For example, if the policy file is named NTcon- fig.pol and is placed in the root directory of Windows NT, NetworkPath should contain the path c:\Winnt\Ntconfig.pol.

6.Have the user log on to the workstation. Windows NT will read the policy file specified by NetworkPath and then apply the appropriate policy to the computer or to the user.

NOTES:

UNC paths may be used in the NetworkPath value. This is beneficial to those administrators who want to centralize the policy file in use.

To change policy settings remotely:

1.Log on as administrator, open the System Policy Editor, and from the File menu, select Connect.

2.Type the computer name of the workstation to be modified, and click Enter. A dialog will appear displaying the user name of the currently logged on

Microsoft Windows NT Server White Paper

47

Page 55
Image 55
Microsoft Windows NT 4.0 manual Modifying Policy Settings on Stand-Alone Workstations, To change policy settings remotely

Windows NT 4.0 specifications

Microsoft Windows NT 4.0, released on July 29, 1996, marked a significant milestone in the evolution of Microsoft's operating systems. As the successor to Windows NT 3.51, this version brought a range of enhancements and features that appealed to both enterprise users and consumers.

One of the standout characteristics of Windows NT 4.0 was its introduction of the Windows 95 user interface, which significantly improved user experience and accessibility. This graphical interface made it easier for users to navigate the operating system, transitioning from the more complex interfaces of previous NT versions. The integration of familiar elements such as the Start menu and taskbar helped bridge the gap between professional and personal computing environments.

Windows NT 4.0 was built on a robust and secure architecture. It utilized the NT kernel, which provided improved multitasking and stability compared to its predecessors. This operating system was designed to handle multiple user sessions simultaneously, making it suitable for servers as well as workstations. The inherent stability of NT 4.0 made it a favorite in enterprise environments, particularly for critical applications and systems.

Another defining feature of NT 4.0 was its support for a wide range of hardware, making it versatile across various machine configurations. It included compatibility with numerous devices and peripherals, which facilitated its adoption in diverse settings.

In addition to user interface enhancements and hardware compatibility, Windows NT 4.0 introduced powerful networking capabilities. The operating system supported TCP/IP natively, alongside NetBEUI and IPX/SPX protocols. This meant that it could seamlessly integrate into existing network environments, providing essential services for file and printer sharing, domain management, and remote access through features like Remote Access Service (RAS).

Security was another key focus area for Windows NT 4.0. Built around security principles, it employed a discretionary access control system, allowing administrators to define user permissions and manage access to resources effectively. This was particularly appealing to businesses that needed to enforce strict security policies.

Windows NT 4.0 also included improved support for backup and recovery, through the inclusion of the NT Backup utility. The operating system allowed for the creation of scheduled backups and simplified data recovery processes, enhancing data integrity and reliability.

As NT 4.0 entered its later years, it laid the groundwork for future Windows operating systems, influencing the design of later versions, particularly Windows 2000. It combined user-friendly features with enterprise-level robustness, ultimately shaping expectations for modern operating systems across various industries.