active directory and pop-up blocker

I have been trying to research our where the pop-up blocker settings are on active directory. We would like to push these down to our users via AD and can not find it anywhere. I can locate on the local machine but not on the server. Do we need to update our AD policy somehow?

 

Remember with those XPSP2 settings you need to manage the policy from an XPSP2 client.

 

I have to correct this

Actually you do not need to be at an xp machine to administer these changes but you do have open AD at least once from an xp machine to have it update server. This is one of the stupiest things i have ever seen from MS, these settings should always match, after all is not the purpose of AD to be able to administer and control your end users machines from one centeral location.

Michael

 

My advice to manage XPSP2 policies from an XPSP2 client works for every scenario. Your advice may work for you, but would not work for everyone. I'm glad you were able to get the adms imported to suit your needs, in your environment

What would your expectation be. When a new client feature is released, what do you want to happen on your server to update the adms? Would you prefer a seperate hotfix to install new templates and selectivly deploy to your DCs? For a small shop that might be ok, but take an enviroment with a 100 DCs and a seperate hotfix isnt as sexy. As functionality is added, it is not easy to handle the multitudes of configurations out there. What do you do about a mixed domain? How do you handle downlevel DCs with current clients? I am interested to hear more about your configuration and what recommendation you would have to make it better.

873449 Changes to Group Policy behavior after installing Windows XP Service Pack 2
http://support.microsoft.com/?id=873449

 

You should be given option

The questions on the net seem to point to the fact that everyone wanted to be able to control there Newly found xp settings from AD. I do not think that is a lot to ask since AD is the reason many of us dumbed Novell for windows, what would be ideal would be to have the .adm files or updates to the AD come down through sus or the up comming wus and give you the option to deploy to what ever pc you would like. And actually have the options added to your AD policy settings does not change the policy it just gives you more options to choose from. I may not be as sophisticated as some Microsoft guys but I would think that these options would be good, your DC AD should most defintly match all the machines they control,