Policy's in Windows Server 2003 Ent



Ross Milne
07-09-2005, 11:53 PM
I am setting up Windows Server 2003 Enterprise Edition, I have set up the
policy so that the last user name dose not display on Workstation Computers
(Windows 2000 Pro) but when i go to a Workstation Computer, it displays the
last user name enterd.

Where do I do this setting so it will not show the last user name displayed.

Thank you for your help.


Ross Milne

Steven L Umbach
07-09-2005, 11:53 PM
You could set it in Local Security Policy or at the domain/Organizational
Unit level. If you did it in Domain Security Policy it should apply to all
computers in the domain unless a Group Policy "closer" to the computer has
the same defined setting that would override the domain policy. You could
use the Resultant Set of policy mmc snapin on your W2003 domain controller
to see the effective Group Policy settings for your domain computers and the
Group Policy that is applying the setting. --- Steve

http://www.windowsnetworking.com/articles_tutorials/Resultant-Set-Policy-Planning-Logging.html
-- RSOP

"Ross Milne" <RossMilne@discussions.microsoft.com> wrote in message
news:B5C6F27E-D9B9-4504-B929-BBD09BEEBD5F@microsoft.com...
>I am setting up Windows Server 2003 Enterprise Edition, I have set up the
> policy so that the last user name dose not display on Workstation
> Computers
> (Windows 2000 Pro) but when i go to a Workstation Computer, it displays
> the
> last user name enterd.
>
> Where do I do this setting so it will not show the last user name
> displayed.
>
> Thank you for your help.
>
>
> Ross Milne

Roger Abell
07-09-2005, 11:53 PM
Also, compensate for the time delay in the machine checking for and
reapplying GPO settings. You could force the workstation with
secedit (W2k) or gpupdate (XP/W2k3), or reboot the workstation,
or just wait out the (up to) hour and half (approximate).

--
Roger
"Ross Milne" <RossMilne@discussions.microsoft.com> wrote in message
news:B5C6F27E-D9B9-4504-B929-BBD09BEEBD5F@microsoft.com...
> I am setting up Windows Server 2003 Enterprise Edition, I have set up the
> policy so that the last user name dose not display on Workstation
Computers
> (Windows 2000 Pro) but when i go to a Workstation Computer, it displays
the
> last user name enterd.
>
> Where do I do this setting so it will not show the last user name
displayed.
>
> Thank you for your help.
>
>
> Ross Milne

Ross Milne
07-09-2005, 11:53 PM
I have set the time dely to 5 mins, but still dose not update the workstation
computers. I have also tryed running the secedit command, and have tryed
rebooting the workstation computerss but the policy's still do not update on
the Workstation Computers.

The policy's I have created work fine on the server, its just not updating
on the workstation computers.

Any ideas?


Ross

"Roger Abell" wrote:

> Also, compensate for the time delay in the machine checking for and
> reapplying GPO settings. You could force the workstation with
> secedit (W2k) or gpupdate (XP/W2k3), or reboot the workstation,
> or just wait out the (up to) hour and half (approximate).
>
> --
> Roger
> "Ross Milne" <RossMilne@discussions.microsoft.com> wrote in message
> news:B5C6F27E-D9B9-4504-B929-BBD09BEEBD5F@microsoft.com...
> > I am setting up Windows Server 2003 Enterprise Edition, I have set up the
> > policy so that the last user name dose not display on Workstation
> Computers
> > (Windows 2000 Pro) but when i go to a Workstation Computer, it displays
> the
> > last user name enterd.
> >
> > Where do I do this setting so it will not show the last user name
> displayed.
> >
> > Thank you for your help.
> >
> >
> > Ross Milne
>
>
>

Roger Abell
07-09-2005, 11:53 PM
The policies are set in what GPO ? which is linked to where ?
We need to verify that the workstations are in fact within the
GPO's scope of management, for example within an OU to
which the GPO is linked. You have not changed the security
settings of the GPO so that it is still set to apply to Authenticated
Users (which includes domain machines) ?

It is also possible that the workstation is not finding a domain
controller in the ways necessary for GP to function. This you
could check by running netdiag on the workstation to verify that
DNS etc. is right, by running GPMC's resultant policy for the
machine (not modeling), etc.

For some policies it is possible that the setting does not have
applicability to W2k, but that is not the case for the one policy
you have mentioned specifically.
--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Ross Milne" <RossMilne@discussions.microsoft.com> wrote in message
news:E0783449-7555-4678-BD2B-F322C7C3CDBA@microsoft.com...
> I have set the time dely to 5 mins, but still dose not update the
workstation
> computers. I have also tryed running the secedit command, and have tryed
> rebooting the workstation computerss but the policy's still do not update
on
> the Workstation Computers.
>
> The policy's I have created work fine on the server, its just not updating
> on the workstation computers.
>
> Any ideas?
>
>
> Ross
>
> "Roger Abell" wrote:
>
> > Also, compensate for the time delay in the machine checking for and
> > reapplying GPO settings. You could force the workstation with
> > secedit (W2k) or gpupdate (XP/W2k3), or reboot the workstation,
> > or just wait out the (up to) hour and half (approximate).
> >
> > --
> > Roger
> > "Ross Milne" <RossMilne@discussions.microsoft.com> wrote in message
> > news:B5C6F27E-D9B9-4504-B929-BBD09BEEBD5F@microsoft.com...
> > > I am setting up Windows Server 2003 Enterprise Edition, I have set up
the
> > > policy so that the last user name dose not display on Workstation
> > Computers
> > > (Windows 2000 Pro) but when i go to a Workstation Computer, it
displays
> > the
> > > last user name enterd.
> > >
> > > Where do I do this setting so it will not show the last user name
> > displayed.
> > >
> > > Thank you for your help.
> > >
> > >
> > > Ross Milne
> >
> >
> >

Ross Milne
07-09-2005, 11:53 PM
> The policies are set in what GPO ?
Password Policys, Do not display last user name enabled, Internet Explorer
Policys/Settings

> which is linked to where ?
Domain Computers

> We need to verify that the workstations are in fact within the
> GPO's scope of management, for example within an OU to
> which the GPO is linked.

> You have not changed the security settings of the GPO so that it is still set to
> apply to Authenticated Users (which includes domain machines) ?
Authenticated Users was selected, with Apply & Read Rights.

> It is also possible that the workstation is not finding a domain
> controller in the ways necessary for GP to function. This you
> could check by running netdiag on the workstation to verify that
> DNS etc. is right, by running GPMC's resultant policy for the
> machine (not modeling), etc.

> For some policies it is possible that the setting does not have
> applicability to W2k, but that is not the case for the one policy
> you have mentioned specifically.


I have been using the secedit /refreshpolicy command in DOS to apply the
policy's to the computers, but when I go to the Event Log, i get error saying
that "Windows was unable to determine the user or computer name. Return value
(1722).


Policy's in Windows Server 2003 Ent