Group Policy

Greetings,

We have emplemented our AD with our 2003 server and have added a standard background for our users. On some machines the local policy seems to be overiding our AD group poli\cy. The odd thing is when we go to desktop properties and view what the desktop looks like it shows what it should be. but the desktop is different than that. anyone have any clues to the cause of this

 

someone moving or renaming their prefered background to match what your policy calls for?

Saw a similar effect by renaming cmd.exe to logon.scr allows someone to have administrative priviledges to your system just by waiting on the screen saver to start on the login screen. This was fixed however with WinXP and locked down NTFS permissions.

You should try putting your preferred background on a network share and have the policy call it from there.

 

The logo is on the Server

The policy is set on the server under the group policy editor. The logo it self resides on the server as well. The background shows up from the roaming profile but the logo does not. However, if you look at the picture of you background under the desktop tap under display properties it showes it there.

 

Verify that the users don't have Active Desktop enabled.

 

Fixed

The actual fix for this was as follows,

i went into the AD and in the same are where the desktop setting was there was a enable active desktop and once i enabled this it works perfect, so you had the right are but the wrong setting,

AD is a god sent of IT but man it hard to work through,

Michael

 

Glad you got it worked out.

Here are some Group Policy resources that you might find useful.

http://www.ultratech-llc.com/KB/?File=GroupPol.TXT