Group policy no domain

Hello,

What I have is a remote connection that can not change the zone settings in
IE and the only way I think this can be done is by group policy changes. Is
this correct?

"Florian Frommherz [MVP]" wrote:

> Michael,
>
> Michael Triber wrote:
> > Can I use this server as a basic server that is not a domain controller and
> > use the group policy for remote logins to the server 2008?
>
> I not sure I follow you - what is it you want to do? Group Policy is for
> managing machines and user desktops from remote or locally. They
> basically do not provide logon functionality. That's what AD does. Can
> you elaborate a little more what you're trying to do?
>
> cheers,
>
> Florian
> --
> Microsoft MVP - Group Policy
> eMail: prename [at] frickelsoft [dot] net.
> blog: http://www.frickelsoft.net/blog.
> Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
>

Michael,

Michael Triber wrote:
> What I have is a remote connection that can not change the zone settings in
> IE and the only way I think this can be done is by group policy changes. Is
> this correct?

That is true. In order to roll out a setting like this to a number of
machines, you'd need to have them in an Active Directory domain as
members. If you have no domain - as I think you did imply this with your
first post - you need to make the changes in one of the machine's Group
Policy Editor (gpedit.msc) and copy the "Group Policy" folder in
system32 to all other machines manually.

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

So how do I configure the policy first before I copy it to the desktop?

"Florian Frommherz [MVP]" wrote:

> Michael,
>
> Michael Triber wrote:
> > What I have is a remote connection that can not change the zone settings in
> > IE and the only way I think this can be done is by group policy changes. Is
> > this correct?
>
> That is true. In order to roll out a setting like this to a number of
> machines, you'd need to have them in an Active Directory domain as
> members. If you have no domain - as I think you did imply this with your
> first post - you need to make the changes in one of the machine's Group
> Policy Editor (gpedit.msc) and copy the "Group Policy" folder in
> system32 to all other machines manually.
>
> cheers,
>
> Florian
> --
> Microsoft MVP - Group Policy
> eMail: prename [at] frickelsoft [dot] net.
> blog: http://www.frickelsoft.net/blog.
> Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
>

Michael,

Michael Triber wrote:
> So how do I configure the policy first before I copy it to the desktop?

Start gpedit.msc on a client and navigate to
User Configuration\Administrative Templates\Windows Components\Internet
Explorer\Internet Control Panel\Security Page\Site to zone assignment
list and make your changes there.

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

Do I have to install something to run gpedit.msc?

Thanks for your help.

"Florian Frommherz [MVP]" wrote:

> Michael,
>
> Michael Triber wrote:
> > So how do I configure the policy first before I copy it to the desktop?
>
> Start gpedit.msc on a client and navigate to
> User Configuration\Administrative Templates\Windows Components\Internet
> Explorer\Internet Control Panel\Security Page\Site to zone assignment
> list and make your changes there.
>
> cheers,
>
> Florian
> --
> Microsoft MVP - Group Policy
> eMail: prename [at] frickelsoft [dot] net.
> blog: http://www.frickelsoft.net/blog.
> Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
>

Michael,

Michael Triber wrote:
> Do I have to install something to run gpedit.msc?

no. You need to have a Windows 2000, Windows XP Prof or Vista Business
and above station to run it.

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste