hi guys, as title ...

the domain policy i need to deploy it at open source platform so how to do ..??

but did some research but all talking about MS AD only ... and i think open source platform i think they need to write a script to RUN it during start up ...


so any guides ? ur idea and helpful are highly appreciate ...

thanks thanks

ah~ if you are thinking of Windows Domain - it must and must have Active Directory in it... if not you can only deploy local security policies only.

Policies in Windows network environment must be created using the Management console or the related command line tools only.

For other UNIX or UNIX-like operating systems, please refer to their manual of creating network-wide security policies.

ohic... but one thing ...

i need to do this first 2 policies first..

1. disable the changing of wallpaper(desktop backgroup).

2. how to disable for opening the control panel in vista.

for the client will be vista but the server side will be CentOS 5 (open source).

sry to tell u that the server is no windows based so there is no windows AD.

launch MMC, add Group Policy Object Editor - and walla, browse around and save the console. The policy can be both for locally logged on user and all users.

Anyhow, you cannot apply the policy from a non-Windows Server operating system. Hence you must deploy the policy manually for every Windows PC you have.

wow
like that not nice edi yor ...

lolzz

coz u can use those batch file to RUN it ..... such as filename is STARTUP.bat

the disable wallpaper already done in windows XP but what about vista ..??

the same security object ler... but you better do it again in Vista for Vista PCs. Many of the security objects differ in Vista...

you don't to run the policy - you apply it once you load the console itself

use the command gpupdate to update the policy for each target PCs if you have access in the network. if you have no idea how to use the command line..

Applying group policy on another computer in a non-AD network
In Computer Management, you can use the User Property dialog box to assign logon scripts to user accounts by typing the file name (for example, user.cmd) in the Logon script text box. this way, the policy can be applied each time a user logging into the computer.

This post has been edited by dopodplaya: Sep 16 2008, 12:26 PM

oh well ... wait wait ....

lets say wallpaper and i wan to make it fix or temp that wallpaper and cannot change to other ...only administrator can change it. i mean i dont wan go to RUN > gpedit.msc > local computer policy > user configuration > administrative templetes > desktop > desktop > desktop wallpaper.

1. Not configured.
2. Enabled.
3. Disable.

if go through all this steps is very troublesome, what if i dont wan to do it this way?? any others ways ??

so how ..?? can do it for non-windows domain???

can...

the only problem is distributing them to each and every PC. with AD, it is easier to distribute policies...

can ..??

so any script and guides ??

you google for gpupdate and NT login scripts... in fact in your System32 folder has example login script...

how to setup login script at post #6

im not really understand the post #6

lolzz

You can create security templates with group policy type settings. Create one template with all of the settings you need in group policy and you should be able to apply it through command line commands (http://books.google.com.my/books?id=O1zKkhpuBvkC&pg=RA1-PA93&lpg=RA1-PA93&dq=windows+security+policy+template+applying+secedit&source=web&ots=pdeXEDbwxF&sig=XXtIlSFE3xx4vwZLWqj5SJa4MC8&hl=en&sa=X&oi=book_result&resnum=1&ct=result#PRA1-PA93,M1)

There are also ways of editing registry keys of remote machines. So if you know the keys you need to edit to obtain the results you want, then create a simple script to loop through a list of computers and run a list of commands on each machine. If all of your machines are configured in the same workgroup, you might be able to get the full list using "net view".