valter

not reallu sure you can use shutdown command from winnt.sif file ...

hi, as per restart try to modify this to fit your needs shutdown.exe -r -f -t 60 -c "Windows XP will now restart in 1 minute..." as per autologon, try to set password on the user while adding the user from adduser.cmd. Don't forget to add password to your autologon.reg Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "DefaultUserName"="John" "DefaultPassword"="asdf1234" "AutoAdminLogon"="1"

This sounds like bad RAM ... have you had problems while installing w2k?

Well not sure if you have active directory installed but GPO software distribution as well as SUS (WUS) is AD dependant. Creating an msi file is rather easy, you have to create a snapshot of a clean computer using Winstall LE (supplied on Windows server CD, you have to run it from the server using UNC path and not mapped drive), then you install windows update (or whatever), and then run winstall again creating a after install snapshot, so winstall can collect all the changes that occured since the last snapshot. The disadvantage with this method is that you have to have reference machine (installed only with windows and updates). If you have i.e. MS office, nero, adobe installed on reference machine, but not on target machine, msi will be created with reference to the missing programs ... Better solution is to update your computers using SUS (WUS) server. It's free program you can dl from MS. SUS (WUS) can't run on domain controller, but MUST run on member server. If you don't have that (as I think you don't) then there is a third solutioin, also using GPO, creating ZAP file. In order for ZAP file to be installed, user on the target computer MUST have admin rights. Application] ; Only FriendlyName and SetupCommand are required, ; everything else is optional. ; FriendlyName is the name of the program that ; will appear in the software installation snap-in ; and the Add/Remove Programs tool. ; REQUIRED FriendlyName = "Microsoft Excel 97" ; SetupCommand is the command line used to ; Run the program's Setup. If it is a relative ; path, it is assumed to be relative to the ; location of the .zap file. ; Long file name paths need to be quoted. For example: ; SetupCommand = "long folder\setup.exe" /unattend ; or ; SetupCommand = "\\server\share\long _ ; folder\setup.exe" /unattend ; REQUIRED SetupCommand = "setup.exe" ; Version of the program that will appear ; in the software installation snap-in and the ; Add/Remove Programs tool. ; OPTIONAL DisplayVersion = 8.0 ; Version of the program that will appear ; in the software installation snap-in and the ; Add/Remove Programs tool. ; OPTIONAL Publisher = Microsoft save it as *.zap file, and the use Software installation dialog from gpo to publish windows update (note that users must start installation themselfs using Add/Remove Programs as zap files can't be assigned) For more detailed manual on how install something using zap files, click here hope this helps ...

any user, just assign him right for this through gpo

It is on the same segment. It's not behind the router. It is selected to respond to clients requesting service. Anyway I'm using 3COM 3300 XM switch ... can this be the problem? Thanks

I know what TFTPD means but I didn't know it's that important. Anyway, yes TFTPD works, but I still can't get an IP from DHCP server. I have no errors in Event log ... my AD works just fine, same with DNS, DHCP ...

TFTPD?

I know that script logic would allow you create user profiles with exchange profile as well, so there is no need for users to do any settings .. check www.scriptlogic.com

AD* refers to Active Directory (should be)

Basically you MUST have CALs for Windows server. Anyway, there is no registration key for CALs, so server will not prevent your clients accessing the server ... (but anyway it's the legal approach that matters)

Try to configure the profile location on user tab it might help.

Have you configure user profile location on user account properties?

true, you don't because you can't make it serve clients as stanard edition ... anyway, not really sure about WUS, but I know that WUS server must me a member of a AD domain, but must NOT be a domain controller ...

I can reccommend you only one thing. Don't mess with EFS if you really don't need it.

Do you really think this has something to do w/ Windows NT4/2000/2003?

Ad 1. Open Active Directory Users and Computers, right click on your AD domain name, click Properties, click Group Policy and then click Edit on Default Domain Policy, find the policy you're trying to apply in the editor and compare it. Ad 2. No, the article you've post link for is how to reset user rights on GPO. (who can read and what). Can't recall the tool name (something like resetpolicydefault.exe) but if you just tell them that you want to reset your security policies to default, they'll now what you need

Just call DELL support, they will help you, very possible that there is a known issue with PE and Promise ... just for the sake of test can you try with other controller(?)

Well it looks like nothing hasn't been applied, at least that's what it says in the gpresult report. Anyway if your default domain security policy on certain GPO is for example set to ON, and OU GPO is set to OFF, the domain level policy will be applied, so make sure that there is no conflict between domain GPO and OU GPO (even though you SHOULDN'T change default domain policy, but only create your own new policies) ... if this doesn't work as well, there is only one thing left (without puting up a case w/ MS) reset security policies to default level. I know that there is a tool from MS that resets sec policies to default level. I don't think you can just download it, but you have to call MS support and ask them to mail it to you ...

Windows 2000 Computer: SECEDIT /REFRESHPOLICY MACHINE_POLICY /ENFORCE User: SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE Windows 2003 gpupdate Beside this, try to find a tool gpresult.exe on the MS website, this should log all policies that applies once you logon. Excellent tool for policy trooubleshooting Hope this helps

You probably have done it already but anyway, did you refresh policy settings on your domain controller?

Use GPO for Domain Security Policies "Access this computer from the network" but then of course it depends what does it means "temporarily"

Not possible at all

I'm trying to install MS Office 2003 using GPO. I've created unattended.mst file and pick if an XP version of an Office is found it should be uninstalled. Anyway, Office 2003 is installed, but XP version is not removed from target computer, so user can use both versions. Any idea? Thanks.

Any events in Event Log? Try to use Safe Mode or Last known good configuration.