Microsoft Windows NT 4.0 User Manual

Page 54

Advertising
background image

46 Microsoft Windows NT Server White Paper

3. In the Update mode box, select Manual (use specific path).

4. In the Path for manual update box, type the UNC path and file name for

the policy file.

5. Click OK to save your changes.

The first time the workstation is modified locally via the System Policy Editor

or receives a default System Policy file from the NETLOGON share of a do-

main controller, this location is written to the registry. Thereafter, all future

policy updates use the location you specified manually. This is a permanent

change until the policy file resets the option to Automatic. The Windows NT

4.0-based computer will never again look at a domain controller to find a policy

file until you either change the instruction in the local registry or modify the

policy file in the location specified by the manual path to set the mode back to

Automatic.

Deploying Policies for Windows 95 Machines

When creating a system policy file for a Windows 95-based client, you must

first install the System Policy Editor on a Windows 95-based computer so that

you can create the policy (.pol) file. You cannot run the System Policy Editor

on a Windows NT 4.0-based server to generate a .pol file for Windows 95-

based clients because a policy file is valid only for the platform on which it was

created. For procedures when installing the System Policy Editor on a Win-

dows 95-based computer, refer to the section “Installing the System Policy

Editor on a Windows 95 Computer” earlier in this document.

After you have created the .pol file, you can enable a Windows 95-based

computer to look for and accept system policies as is described below.

To deploy policies for a Windows 95-based computer:

1. Open the Control Panel, and click Passwords and then User Profiles.

2. To enable User Profiles, select Users can customize and then click OK.

3. Check the UpdateMode value in the following registry location:

HKEY_LOCAL_MACHINE

\System

\CurrentControlSet

\Control

\Update

If this value is 0, policies will not be applied. If this value is 1, the Auto-

matic Policy mode is in effect and when the user is validated on the

domain, the validating domain controller’s NETLOGON share will be

checked for the existence of the Config.pol file. If this value is 2, the Man-

ual Policy mode is in effect, and when the user is validated on the domain,

the Windows 95-based machine will check the path specified in the value

NetworkPath for the existence of the Config.pol file. Note that the default

mode for a Windows 95-based machine is Automatic.

4. Restart the computer and have the user log on. The policy file will be

downloaded from the configured location and applied.

Advertising