Announcement

Collapse
No announcement yet.

Group Policy for XP SP 2 FW

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Group Policy for XP SP 2 FW

    I have recently installed on 35 computers the SP2.
    I have a 2k server with AD and all my workstations are XP.
    can someone please refer me to a tool or a GPO that can mamage the FW of the XP SP2?

    otherwise i'll need to config them manually.

  • #2
    well ehmmm import the right adm files into de GP ?

    also have a look at Group policy management console. nice management tool..
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      I'm using the GPMC

      where can i find the ADM?

      Comment


      • #4
        anyone????
        have any idea????

        Comment


        • #5
          im very busy, so sorry for the late answer...
          but:backup you're old adm files on you're dc's and copy the new adm files to you're DC's (C:\windows\inf i thought)
          that should do the trick

          also you sounds not very farmiliar with GPO.
          so just a tip, DO not edit the default domain policy, but create new ones
          just have a look at the following articles:

          http://forums.petri.com/viewtopic.php?t=2041
          http://www.microsoft.com/resources/d..._gpedt_how.asp
          http://www.microsoft.com/resources/d...-us/gp/228.asp
          http://www.microsoft.com/technet/pro.../mngdepgp.mspx
          http://labmice.techtarget.com/active...y/grpolicy.htm
          Marcel
          Technical Consultant
          Netherlands
          http://www.phetios.com
          http://blog.nessus.nl

          MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
          "No matter how secure, there is always the human factor."

          "Enjoy life today, tomorrow may never come."
          "If you're going through hell, keep going. ~Winston Churchill"

          Comment


          • #6
            Also here Yoav:

            By default, when a GPO is opened, a comparison is made between the timestamps of the .adm files stored in the GPO being edited and those on the local computer. If the local .adm files have a more recent timestamp then they are uploaded to the domain controller and replicated throughout the domain. From that point, all earlier versions of gpedit use the new .adm files. This scenario is illustrated in the following steps.

            1. Install Windows XP SP2 on the administrative computer.

            2. Open existing GPO in Group Policy Object Editor. The .adm file stored on the administrative computer is uploaded to domain controller. GPO is "upgraded" to SP2.

            3. This .adm file is replicated to all domain controllers in the domain.

            4. If the GPO is opened by other administrative workstations in the domain that are not running Windows XP with SP2 or the latest version of gpedit, error messages appear.

            Important - Opening a GPO on a computer running Windows XP with SP2 causes all other administrative workstations to use the new .adm files (note that no changes need be made to the GPO for this to occur). This will generate error messages when earlier versions of gpedit are loaded. For more information about this issue, see Microsoft Knowledge Base article 842933.

            See the entire article here:

            http://www.microsoft.com/technet/pro.../mngdepgp.mspx
            Cheers,

            Daniel Petri
            Microsoft Most Valuable Professional - Active Directory Directory Services
            MCSA/E, MCTS, MCITP, MCT

            Comment


            • #7
              Thank's Daniel, I'll use it A.S.A.P

              Yoav

              Comment

              Working...
              X