how can i configure group policy in win 2003 domain controller & how can i configure win xp clients also?
359752
Once you have the OU's defined you simply right click the OU and select properties.  Here you select the group policy tab and can create new policies here. The other option is to run MMC and install the group policy editor.  If you do that then the group policy tab in AD will warn you that it has been installed and you should edit all policies that way.\n\nAs for configuration of XP clients that is what the policies do when the computer is added to the OU.
345724
The default group membership would be administrators, if all the defaults are taken during setup.  Otherwise, the default is power users.
119472
Using Group Policy would be better:\n\nMS has a new tool that came with Server 2003  GPMC.msc\nGroup Policy Management Console.  I believe you can get it off their website....but regardless of what tool you use, I would use group policies for that....it's one of the main reasons 'group policies' were created....user password mgmt.
353666
You didn't mention which OS you were using so i'm gonna assume you're using win server 2003.\n\n"Setup another DC." This DC will act as a peer server and active directory data will be copied to it when it is set up. try the microsoft windows server 2003 techcenter for more detailed information.
173705
I dont want to re-invent the wheel. \nhere's the link that'll explain better\nThis is assuming that you have WINDOWS XP HOME EDITION OPERATING SYSTEM\nhttp://www.microsoft.com/windowsxp/using/networking/expert/bowman_02april08.mspx
299674
HI,\n    To setup a network you can do it with xp as well as with windows 2000,2003 with xp you can go for workgroup where each system works as a client and server so there is not much security using this . Better to go with windows 2000 or 2003 where one system will act as a server and all other system will act as client not necessary that all the system must have windows 2000 or 2003 only one is sufficient rest all can have xp operating system. Using this domain/client you can assign password to the user as per your convince .. To assign password follow this\n         \n       right click my computers --clk manage there you can find the option of  user and groups create your users and groups and assign them the password as per your requirements ,..each time a user tries to logon to the network then he need to give the password and user name without which he cant logon..using xp in all the system its not possible to create domain/client environment so go for the above suggested method.\ntry this you can make it dear
54422
Are they all in the same workgroup?  Check out  http://www.practicallynetworked.com/sharing/xp/addxp.htm\nhttp://www.microsoft.com/windowsxp/using/networking/learnmore/russel_02april08.mspx\nBasic Checklist for Networking\n1. Ensure that all firewalls are disabled for all computers involved.\n2. Ensure that all computers on the network are in the same workgroup.\n3. Ensure each computer has "file and printer sharing" installed.\n4. Ensure that you have 'File Sharing' enabled - to do this, right-click on any Drive/Folder/File on one (or all) of the other computers, and select 'Sharing and Security...'. Ensure that 'Share this folder on the Network' is enabled.
1182118
Start Programs Administrator Tools\nActive Directory For users\nIn there create a name for the user.\n\nNow go to the windows XP computer\nRight click on my computer and go to properties\nClick Computer Name Tab\nClick the button that says Network ID\nYou will go throu a wizard which will add your computer to the domain that you have created\n\nIf you need anymore help just shoot me a imz and I will help you out.  Its very easy once you do it.\n\nGlad we got everyting working just make sure you have a complex password on the next few users or two when you strat playing around with the GPO create several users and put them in different OU so you can see what happeneds on each user.  This is a good way to learn GPO and active directory.
727189
You need to use a Local group for backward compatibility with Windows NT 4. \nNote that this is different from a Domain Local group beause Domain Local groups will be available domain wide only in Windows 2000 native or Windows server 2003 domains.
460283
Just change your workgroup name to match the other one.  Workgroups are not created in the sense that a domain is.  You have to change the workgroup of every machine on the network to the same name.
1131656
This is a difficult one. I am going to assume that you are using XP professional and that you may be a student using a computer in a lab or some one working at a major company with large network and IT budget, or some one like a parent/sibling is trying to stop you from changing settings there in folder options.\n\nIn XP there is a program called Group policy editor and one of the things you can disable with it is the folder options menu. If the account you are logged in with is not an administrative account you might be lost already. If you are logged in with an account htat has administrative priovelages then goto START and then RUN.\n\ntype in GPEDIT.MSC. if you see a message about access denied then your'e out of luck. A setting in Group policy editor can be set to dissallow the use of group policy editor.\n\nIf you can get into group policy editor then you are moments away from that FOLDER OPTIONS menu.\n\nGo into GPEDIT using the instructions above (Start > run etc)\n\nExpand user configuration by click on the + sign next to it(if it's a minus just leave it). Now expand ADMINISTRATIVE TEMPLATES and the Expand WINDOWS COMPONENTS and the WINDOWS EXPLORER. click on the WINDOWS EXPLORER folder. See there are many settings.\n\nRIGHT click on REMOVES THE FOLDER OPTIONS MENU ITEM FROM THE TOOLS MENU and select PROPERTIES.\n\nClick the option box DISABLED and then click APPLY(just in case) and then OK.then goto FILE and EXIT. Restart your PC and it should be there.
3157
This article describes how and where Internet Explorer security zones and privacy settings are stored and managed in the registry. You can use Group Policy or the Microsoft Internet Explorer Administration Kit (IEAK) to set security zones and privacy settings. If you are using Group Policy or IEAK on a Microsoft Windows 2000-based computer, you may have to install several hotfixes to set security zones and privacy settings.\n\n\nIf the Security Zones: Use only machine settings setting in Group Policy is enabled, or if the Security_HKLM_only DWORD value is present and has a value of 1 in the following registry key, only local computer settings are used and all users have the same security settings: \nHKEY_LOCAL_MACHINE&#92;Software&#92;Policies&#92;Microsoft&#92;Windows&#92;CurrentVersion&#92;Internet Settings\nWith the Security_HKLM_only policy enabled, HKLM values will be used by Internet Explorer, but the HKCU values will still be displayed in the zone settings on the Security tab in Internet Explorer. This is by design and there are no plans to change this functionality.\n\nIf the Security Zones: Use only machine settings setting is not enabled in Group Policy, or if the Security_HKLM_only DWORD value does not exist or is set to 0, computer settings are used along with user settings. However, only user settings appear in the Internet Options. For example, when this DWORD value does not exist or is set to 0, HKEY_LOCAL_MACHINE settings are read along with HKEY_CURRENT_USER settings, but only HKEY_CURRENT_USER settings appear in the Internet Options.\nNote With the Security_HKLM_only policy enabled, HKLM values will be used by Internet Explorer, but the HKCU values will still be displayed in the zone setting tab within the Internet Explorer Interface. This is by design, and there are no plans to change this functionality at this time. \nTemplatePolicies\nThe TemplatePolicies key determines the settings of the default security zone levels (Low, Medium Low, Medium, and High). You can change the security level settings from the default settings. However, you cannot add additional security levels. The keys contain values that determine the setting for the security zone. Each key contains a Description string value and a Display Name string value that determine the text that appears on the Security tab for each security level. \nZoneMap\nThe ZoneMap key contains the following keys: • Domains \n• ProtocolDefaults \n• Ranges \nThe Domains key contains domains and protocols that have been added to change their behavior from the default behavior. When a domain is added, a key is added to the Domains key. Subdomains appear as keys under the domain where they belong. Each key that lists a domain contains a DWORD with a value name of the affected protocol. The value of the DWORD is the same as the numeric value of the security zone where the domain is added.\n\nThe ProtocolDefaults key specifies the default security zone that is used for a particular protocol (ftp, http, https). To change the default setting, you can either add a protocol to a security zone by clicking Add Sites on the Security tab, or you can add a DWORD value under the Domains key. The name of the DWORD value must match the protocol name, and it must not contain any colons (:) or slashes (/). \n\nThe ProtocolDefaults key also contains DWORD values that specify the default security zones where a protocol is used. You cannot use the controls on the Security tab to change these values. This setting is used when a particular Web site does not fall in a security zone. \n\nThe Ranges key contains ranges of TCP/IP addresses. Each TCP/IP range that you specify appears in an arbitrarily named key. This key contains a string value (:Range) that contains the specified TCP/IP range. For each protocol, a DWORD value is added that contains the numeric value of the security zone for the specified IP range. \n\nWhen the Urlmon.dll file uses the MapUrlToZone public function to re
100937
Tweak utilities use the Group Policies keys so this should work:\nChoose Start, Run, type gpedit.msc, and press Enter. Use the tree on the left to navigate to Local Computer Policy &#92;User Configuration &#92;Administrative Templates &#92;Control Panel. Right click on 'Prohibit access to the Control Panel', properties and 'enable'.\n\nEdit - If you are unable to assign users into groups I can not figure out how disable it for only specific users. I'd try posting it to the MS newsgroups.\n\nhttp://support.microsoft.com/newsgroups/
504401
You can but you will be sad.\n\nIMPORTANT: Do not move any domain controller accounts out of the default Domain Controllers OU, even if some administrators log on to them to perform administrative tasks. Moving these accounts will disrupt the consistent application of domain controller policies to all domains, and is not supported.
142913
You "merely" install a Domain Controller. Of course to do that you must have a Windows 2000 or Windows Server 2003 Server on your network. Once you have a server online, you can promote it to be a Domain Controller by using a program called DCPromo. \n\nThere are a host of things to consider when planning a domain. I would not consider setting up a domain to be "simple" :-) - that's what this whole MCSE certification thing is about.
1020297
set the security on the share to allow only certain users\n\nright click on the drive >properties > security and set security. \n\nyou can set security for users and machines.  and different levels (some can read but not write, etc)
600220
Ummmm... yeah we're going to need a little more info than that to help you out.  \nAre you connected to a busniess network cause if you are you don't get to change it, the admin does.\n\nThe domain controllers and group policies tell your computer where to go to logon.