Issue of group policy

Similar Questions

• Restart issues "Group Policy Client Service could not connect." "The media is write protected."

  The problem arises when a Norton message requires a reboot. It does not get me beyond the point when Windows prompts for a password. The words appear on screen reboot problems ' Customer Service Group Policy has no connect. " "The media is write protected."

  I cause the phone to crash in order to activate the Windows repair program.  It works but the custody of Norton is disabled. A program Norton Repair heals so that the fault.

  I had several chat sessions with Norton, but they now point me to Microsoft saying that it is a Windows program that is related to Norton.

  Hi ColinAW,

  Your computer is connected to a domain?

  The question could be linked to the program Norton himself. I suggest you try the following steps:

  Step 1: Disable Norton Security software; Follow the steps mentioned in the link below

  Disable antivirus software

  http://Windows.Microsoft.com/en-us/Windows-Vista/disable-antivirus-software

  Important: Activate security software once everything is done.

   

  Step 2: The computer in the boot and a test

  Follow step 1 in the link below,

  How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7

  http://support.Microsoft.com/kb/929135

  If everything works well after a clean boot, you can deduce that some third-party services are at the origin of the problem.

  Continue with the remaining steps to pin-point on the third party service.

  After find you the program that is causing the problem, you will have to perhaps to update or install a newer version of the program, if you rarely use that you should consider uninstalling the software.

  Important: n ' forget not the computer to start normal follow step 7 in the link.

  If this problem occurs only updated Norton software, of course, the problem is related to the Norton software, and you can check with Norton again for any patches to address this issue.

  http://www.Symantec.com/Norton/support/index.jsp

  Thank you, and in what concerns:

  Ajay K

  Microsoft Answers Support Engineer

  Visit our Microsoft answers feedback Forum and let us know what you think.

• Local administrator account and issue of local Group Policy permissions problem.

  You have a local administrator account where it was defined

  http://img26.imageshack.us/img26/5716/18112010133154.PNG

  I think preventing the admin account to remove or install devices.  This causes a problem.  Looks like it's AD GP as is grayed out and I can't add locally.  The network team claim there is no GPs AD to limit the admin account local they know of.

  Also, I try to use the process on the machine monitor, but who needs administrator rights and he repeats that the local administrator account is not a member of the Administrators group, but it is.

  Any ideas?  Even if it's just he Process Monitor bit setting?

  And looking at the photo can someone explain which means that icon next to load and unload device drivers.  It is different from the others and think that it is linked, may be trying to tell me that it is a strategy of AD Group.

  I talked to the networks, they said there is not together AD GP for this.  I used the local administrator account to create a new local administrator account and put it in the Administrators group.  Connected to it and it also has the same problem.

  Any ideas?

  The symbol, that you reference indicates that the setting has been locked by group policy and is not editable.  When I saw it in the past, the only way I could replace, it is using "secedit".  For more information about this command:
  Starting-> help and support-> Search: Secedit

  "Elephant Gun" approach might also work:

  "How to restore the security settings the default settings?
    <>http://support.Microsoft.com/kb/313222 >

  HTH,
  JW

• Group Policy - software package deployment issues via GPO

  Hello world

  I have a customer requirement that a 3rd party browser plugin must be installed in all versions of IE. Since the manual installation consumes huge person-hours, has planned to use the GPO

  Created GPO & home to respected UO - computer configuration--> policies--> the software--> Software Installation settings

  Plugin is not installed in any PC, all computers has following errors in eventviewer

  Event 101 ID - the assignment of application OrgPublisher PluginX 11.5 of policy chart plugin - msi deployment failed.  The error was: % 1274

  Event ID 103 - the removal of the assignment of the OrgPublisher PluginX 11.5 of the strategy chart plugin - msi deployment failed.  The error was: %value%

  Event ID 108 - cannot apply changes to software installation settings.  The installation of the software deployed through Group Policy for this user has been delayed until the next logon, because the changes must be applied before the user logon.  The error was: % 1274

  Kind regards

  Karthik V

  Hello Karthik,

  Thanks for posting your question on the forum of the Microsoft community.

  The question will be better suited to the audience of professionals on the TechNet forums.

  I would recommend posting your query in the TechNet forums.
   
  TechNet Forum
  http://social.technet.Microsoft.com/forums/en-us/home?category=w7itpro

  Thank you

• New want: set group policy not available in this edition of Windows 8?

  Just before I used my recovery on Envy 6 partition I bought less than a month ago, I tried to define group policy in order to take control of my administrator account. I received an error message: "group policy is not a feature of this edition of Windows 8.1."

  I knew My Envy 6 security problems (in my opinion, nothing to envy about it...) since I got it.

  I have known this same problem several times, with different computers, then perhaps it is not just HP.  However, I spent the time shared an office with two of its engineers, who blew me subject my security concerns.

  What happens first, did someone other than I turn my computer and started using my machine as a distributed resource.  When I look at the resource monitor, the memory usage remains at a stable level around 30%; the window of the disk (Disk 0, I presume) remains at about 100%, for several minutes after I started working.  There is evidence that copies of the countless applications are pushed through this channel to an unknown person to me.

  In other words, it's like I had to work in a large company where administrators are able to share my computers memory and storage (and also, copies of programs on my machine) with others.

  Yesterday, I took my machine at Best Buy Geek Squad for the third time since I bought it less than a month ago.  For the first time, they have me seriously on this security issue.  Yesterday, the fourth time I used my security partition, (once I had looked into the Task Manager and saw more than 50 tasks scheduled to run when the machine has been slowed and on current alternative) I decided to see what would happen if I leave the fully charged battery to work.

  What I saw, it was a machine to panic.  I saw a sequence of four first screenshots, then a flash of a task list, and then a series that looked like screen shots again - this time fourteen of them.  I watched it happen to three different times.  Then, the machine made me a 'Capital A administrator' password, which I didn't.

  I looked around resources here and on Windows and discovered that I could access boot options by turning on the machine and pressing the ESC key.  I ran through the list of options there and finally chose EFI, where I finally has two ways to start at an unknown address.  So that's another trick of Geek Squad was in order (I bought their contact service when I bought the machine, what the devil).  This time there was pretty much irrefutable evidence that something was wrong at the level of Internet security.

  I realized that it is way to much information.  I'll ask just once more the question: is it possible that my brand new machine doesn't really have a 8.1 Windows edition that does not include the ability to group policy management?

  Thanks to all who responded here.

  Hi @ElizaDoolittle8

  Thank you for your request, I am happy to help you!

  I understand that you have some security issues. You have taken your computer to the Best Buy Geek squad, 3 times and have used the 4 times recovery partition.

  Only Windows 8 Ultimate and professional have the Group Policy Manager.

  I suggest you do a full restore in the factory.  This will remove all the threats that may be installed.

  If you don't have virus protection, I would say that you install one because it would help.

  Performing a recovery of HP (Windows 8) system

  During the recovery process, you will have an option to backup your personal files to avoid loss.  If you do not have a recent backup I suggest you only do one now.

  Restore files that have been supported to the top using HP Recovery Manager (Windows 8)

  Here is a link to a YouTube video.  Desktop version of Windows 8 open the Group Policy Management Console

  Here is a third-party link to How to activate 'Group Policy Editor' (gpedit.msc) in Windows 7 Home Premium, Home Basic and Starter Editions? who, according to some readers have worked for them.  You can try it, but I don't know if it works or

  not. (of A? KVG)

  I hope this helps.

• Group Policy (Windows Server 2012)

  I am using Microsoft Server R2 Standard Edition 2012. I facing ' am question is, I applied a group policy, to block all USB ports on computers in the domain. So without knowing it also applied to the servers in the network. After a while I had to disable the NIC in the server and hit restart. To my great surprise, the group policy is applied, and I am unable to use same USB keyboard and mouse after the restart of the process to the Welcome screen.

  Please post your query to:

  https://social.technet.Microsoft.com/forums/

  Server issues are better addressed there.

• How to set up a personalized message for the prevention of the installation of the software via group policy in windows server 2012

  Hello

  I would like to know how to set up a personalized message for the prevention of the installation of the software via group policy in windows server 2012 R2.

  I released some software in my field to a distribution point and I of installation for few of them software restriction policies. But I don't want the default next message below:

  "The system administrator has set policies to prevent this installation." This installation is forbidden by system policy. Contact your system administrator. »

  Instead, I would like to set up a custom message. Please tell us how can I do same by using Group Policy, if not available, what are the alternatives that I can use.

  This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)
  *
  http://social.technet.Microsoft.com/forums/en-us/home s/fr-U.S./Accueil
  http://social.msdn.Microsoft.com/Forum

• Windows update/microsoft update, access denied to programs, group policy has locked me out of my own darn computer programs!

  Update 2 automatic update was using me on windows and programs microsoft as well, no more! I get only updats on windows and I can't change the settings. I visit microsoft update and it tells me some _ like error 0 x 80070002 # I was at mr difficulty, vista, help and support, ive been online with microsoft online solution and they take me right back 2 where ive already been TO A DEAD END! Ive tried to reset components update has even deleted files off of the data store. Another problem is about reported problems & solutions-i can view all issues and report to them, but if I ever try to view something FORGET IT! I tried many things to fix this but I always get 'THE PAGE THAT YOU ARE TRYING to VIEW CANNOT BE DISPLAYED' quiet similar to internet explore cannot display this Web page. ALSO I can't start or stop a lot of the services on the group policy service, he won't let me do either one! Also, I use WINDOWS VISTA HOME PREMIUM 32-BIT OPERATING SYSTEM. Whenever I visit a solution center it tells me that I can't use solutions on windows vista I have to go to WINDOWS XP for advice. PLEASE HELP ME BEFORE I GO TO THE EXTREME AND USE A HAMMER, IT HAPPENED FOR ABOUT TWO MONTHS AND HIS STARTS TO BECOME REALLY BORING!

  Quote your full version of Windows (for example, WinXP SP3;) Vista SP1; Vista 64 - bit SP2; Win7; Win7 64 bit) when you post in a forum or a newsgroup.

  [rest of the removed message]

• TCP/IP configuration with group policy?

  Hi guys!

  I intend to install the DHCP server on my domain controller (windows 2003) concerning the dynamic assignment of IP addresses, where all the computers on the network are using static IP now. I don't want to change the existing TCP/IP configurations of computers and other network of dynamic static devices in addressing all the machines in the network as it is tedious and not professional. Do I need some special or additional configurations to DHCP or any group policy useful to change dynamically TCP/IP configurations.

  any help to the my query will be highly appreciated.

  Best regards and thanks in advance

  Server problems are better managed on Technet.  http://social.technet.Microsoft.com/forums/en-us/categories/

  responses to consumer issues.

  Good luck

• Instalation of process, removal, and enumeration for softwear application deployed via Group Policy. How did

  Processes a request instalation, removal, and enumeration for softwear deployed via Group Policy. How Group Policy How did for me.

  Hello
   
  I suggest you contact the Technet forum, where we have some support professionals who are well equipped with knowledge on area issues, to do so please visit the link provided below.
   
  http://social.technet.Microsoft.com/forums/en-us/winserverfiles/threads
  

• Safely remove hardware shortcut blocked by group policy.

  Accidentally posted this earlier in the windows 7 box... its a matter of xp.

  Hi all

  Im having some trouble with our strategy of group set up.  We like to remove from the tray of some users, but this introduces the problem of how they eject their USB drives.

  We stumbled upon this path of the shortcut RunDll32.exe shell32.dll, Control_RunDLL hotplug.dll which works very well.  The problem is that we have a group policy setting that allows only the specified in a list programs to be run.  Located atUser Config/Admin time/system/run only allowed Windows applications.

  Ive tried to add rundll32.exe in the list, but still running the shortcut gets blocked.  Anyone could shed some light on this?

  Thank you

  SJ

  Hello jillbeanpallipe,

  The Microsoft Answers community focuses on issues and problems related to the consumer environment. Please join the public IT pro TechNet forums below:
  TechNet - Windows Server
   
  Thank you

• Windows XP - Event ID 1058 - Group Policy processing interrupted

  Hi, I was getting event ID 1058 - aborted errors on clients in my child domain of Group Policy processing. I activated the service Distributed Transaction Coordinator from disabled to automatic and policies are applied successfully.

  My question is: why the MSDTC service must apply GPOS? The PC having the issue were at the remot locations.

  Thank you

  Dave

  Hi Dave,.

  Your question is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the TechNet forum.

  http://social.technet.Microsoft.com/forums/en/category/windowsxpitpro

• My family in Windows XP system restore is disabled by group policy. The system cannot me to enalbe this function, despite I have a partition of my hard drive to store all backup

  When I open the System Properties dialog box, System Restore is checked, saying: she is disabled by group policy, and the system you cannot activate this option. I got a partition dedicated to my justo of hard disk to store backups and create Points of restoration with a capacity of 10 GB. How can I solve this problem?

  If you see things like this:

  You do not have sufficient security privileges to restore your system.
  The System Restore tab is missing from the my computer properties.
  System Restore has been disabled by group policy.  To turn on system restore, contact your domain administrator.
  The System Restore tab is available, but the turn off System Restore (disabled by Group Policy) box is grayed out.
  The task manager has been disabled by your system administrator.
  The registry editor has been disabled by your system administrator.
  The task manager has been disabled by group policy.
  The registry editor has been disabled by group policy.
  The command prompt has been disabled by your administrator.  Press a key to continue...
  The operation has been cancelled due to restrictions in effect on this computer.  Please contact your system administrator.
  The "Run" option is missing from the start menu.
  The option "Log off."... ' is missing from the Start Menu.

  The usual advice are something in the sense of "something has been disabled in the group policy...". ", and it is probably true that something has been disabled, but you know what something is and what it takes to do about it.

  If you are using XP Home Edition, you will get away with advice to use the Group Policy Editor, because there is no Group Policy Editor in XP Home and that really doesn't tell you where to look in group policy, even if you run the Group Policy Editor.

  You need a complete solution that works for all versions of XP and requires no hunting around in the Group Policy Editor or registry to find where things are that have been disabled.

  Unless you have disabled these things on purpose, chances are good that your system has a malware infection.  The malware knows what tools you use to try to find and remove, for the malware disables the things you are more likely to consume and prevents them from running if you can't find the malware and remove it.

  If your system has this kind of affliction, all malicious software tools you currently use or have used failed to protect your system so that you can expand your horizons malware detection and prevention to prevent these kinds of afflictions in the first place.

  The malware will be happy you trick into thinking that you need to so something drastic to fix your system - as a facility repair, system restore point or a total reinstallation of XP.  This is what it would be like you, but these measures are not necessary.

  You must solve the immediate problem of the tools does not, then scan your system for malware when you are finished.

  No matter what kind of malware you've used analytical tools, they are unlikely to solve this problem, because they cannot tell if the changes made to your system have been on purpose (you or an administrator who makes them) or some malware changed them, so the analysis tools will let these things alone (it's usually a good thing).

  If your system is afflicted in this way, there are probably other things that also do not work - like the Task Manager, the registry, System Restore and command prompt Editor, so fix them all at once even if you have not discovered they are broken again.

  These commands from registry removes the registry entries that are stop opening programs.  Although the registry entries do not exist, these commands are safe to run and will work for all versions of XP.

  Before making any changes to your registry, back up the registry with this free and popular tool:

  http://www.SnapFiles.com/get/ERUNT.html

  Open Notepad to create a new text file:

  Click Start, run and enter in the box:

  notebook

  Click OK to open a new Notepad file.

  Copy and paste the following lines of text into the new Notepad file.

  Windows Registry Editor Version 5.00

  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
  "DisableTaskMgr" = -.
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
  "DisableRegistryTools" = -.
  [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System]
  "DisableCMD" = -.
  [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem\\\]
  "DisableTaskMgr" = -.
  [HKEY_USERS\.default\Software\Microsoft\Windows\CurrentVersion\Policies\System]
  "DisableTaskMgr" = -.
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
  "DisableCAD" = DWORD: 00000000
  [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\SystemRestore]
  "DisableConfig" = -.
  [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\SystemRestore]
  "DisableSR" = -.
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
  "NoRun" = -.
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
  "NoRun" = -.
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
  "NoClose" = -.
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
  "NoClose" = -.
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
  "NoSetTaskbar" = -.

  Save the new text file with extension .reg on your desktop or somewhere you can remember with a name you can remember, something like:

  enableit.reg

  After you save the file, close Notepad.

  Locate the file enableit.reg on your desktop and double-click it.

  Alternatively, you can right-click on the enableit.reg file, choose open with... and select the registry editor.

  Answer in the affirmative to the question... Are you sure you want to add the information in the registry?

  You should then see a message that information has been registered in the register.

  Reboot your system and test.

  You can delete the enableit.reg file when you are finished.

  If the registry editor has also been disabled, we first fix (not a problem).

  Given that your system has or has had an infection, follow up with this:
  Perform scans for malware, and then fix any problems:
  Download, install, update and do a full scan with these free malware detection programs:
  Malwarebytes (MMFA): http://malwarebytes.org/
  SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
  They can be uninstalled later if you wish.

  For the benefit of Microsoft technical support engineers, here are some ideas offered in the past which does NOT help with this issue:

  Safe Mode boot
  Last good known Configuration startup
  A clean boot
  Sfc/scannow in running (or trying to run)

• "System Restore checkbox is disabled (through Group Policy)"

  Where can I ask a question ' how can I turn on system restore which is disabled by group policy?

  I turn off System Restore by using these steps. Right click on my computer-> properties-> system-> clicked restore on turn off System Restore check box.

  Using the same way, that I can not activate it because the box is disabled (through Group Policy).

  Please help me solve this problem. Thanks in advance.

  It's too bad the Answers MS deficient of remains of forums in that it does not prompt for any system information when a new question is asked, that's why we don't know anything about your system.

  If that's what you see and you do not have it to yourself, your system is currently or has been infected by malware.

  You can solve the immediate problems, but I would not use system restore to solve any problems your not specified, it (but it's up to you).

  Here are the suggestions that you might see will not work (just so you don't waste your time) and then how actually to solve this problem.

  The usual advice are something in the sense of "something has been disabled in the group policy...". ", and it is probably true that something has been disabled, but you know what something is and what it takes to do about it.

  If you are using XP Home Edition, you will get away with advice to use the Group Policy Editor, because there is no Group Policy Editor in XP Home and that really doesn't tell you where to look in group policy, even if you run the Group Policy Editor.

  You need a complete solution that works for all versions of XP and requires no hunting around in the Group Policy Editor or registry to find where things are that have been disabled.

  Unless you have disabled these things on purpose, chances are good that your system has a malware infection.  The malware knows what tools you use to try to find and remove, for the malware disables the things you are more likely to consume and prevents them from running if you can't find the malware and remove it.

  If your system has this kind of affliction, all malicious software tools you currently use or have used failed to protect your system so that you can expand your horizons malware detection and prevention to prevent these kinds of afflictions in the first place.

  The malware will be happy you trick into thinking that you need to so something drastic to fix your system - as a facility repair, system restore point or a total reinstallation of XP.  This is what it would be like you, but these measures are not necessary.

  You must solve the immediate problem of the tools does not, then scan your system for malware when you are finished.

  No matter what kind of malware you've used analytical tools, they are unlikely to solve this problem, because they cannot tell if the changes made to your system have been on purpose (you or an administrator who makes them) or some malware changed them, so the analysis tools will let these things alone (it's usually a good thing).

  If your system is afflicted in this way, there are probably other things that also do not work - like the registry editor, System Restore and the command prompt, so fix them all at once even if you have not discovered they are broken again.

  These commands from registry removes the registry entries that are stop opening programs.  Although the registry entries do not exist, these commands are safe to run and will work for all versions of XP.

  Before making any changes to your registry, back up the registry with this free and popular tool:

  http://www.SnapFiles.com/get/ERUNT.html

  Open Notepad to create a new text file:

  Click Start, run and enter in the box:

  notebook

  Click OK to open a new Notepad file.

  Copy and paste the following lines of text into the new Notepad file.

  Windows Registry Editor Version 5.00

  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
  "DisableTaskMgr" = -.
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
  "DisableRegistryTools" = -.
  [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System]
  "DisableCMD" = -.
  [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem\\\]
  "DisableTaskMgr" = -.
  [HKEY_USERS\.default\Software\Microsoft\Windows\CurrentVersion\Policies\System]
  "DisableTaskMgr" = -.
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
  "DisableCAD" = DWORD: 00000000
  [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\SystemRestore]
  "DisableConfig" = -.
  [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\SystemRestore]
  "DisableSR" = -.
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
  "NoRun" = -.
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
  "NoRun" = -.
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
  "NoClose" = -.
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
  "NoClose" = -.
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
  "NoSetTaskbar" = -.

  Save the new text file with extension .reg on your desktop or somewhere you can remember with a name you can remember, something like:

  enableit.reg

  After you save the file, close Notepad.

  Locate the file enableit.reg on your desktop and double-click it.

  Alternatively, you can right-click on the enableit.reg file, choose open with... and select the registry editor.

  Answer in the affirmative to the question... Are you sure you want to add the information in the registry?

  You should then see a message that information has been registered in the register.

  Reboot your system and test.

  You can delete the enableit.reg file when you are finished.

  If the registry editor has also been disabled, we first fix (not a problem).

  Then, you should do this:

  Perform scans for malware, and then fix any problems:
  Download, install, update and do a full scan with these free malware detection programs:
  Malwarebytes (MMFA): http://malwarebytes.org/
  SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
  They can be uninstalled later if you wish.
  Restart your computer and solve the outstanding issues.

• On a windows 2000 Server computer how to configure Group Policy to prevent my students to always change the desktop background and screen saver? __I want to set a screen saver and corporate logo.

  The server is a standard computer on Windows 2000 server and the workstations are XP.  We will be upgrading our servers next year, but for now I have to use what I have.  I do not know true with Windows 2000 Server Edition.

  You have posted in a forum for issues of office and customization for the Windows XP operating system. Your question has to do with Windows Server and group policy. Here's a great site to help you with your server issues:

  http://www.Petri.co.il

  Questions on group policy can be asked in the TechNet forums or in the Group Policy newsgroup:

  In a News Reader: microsoft.public.windows.group_policy
  On the web: http://www.microsoft.com/communities/newsgroups/list/en-us/default.aspx?dg= microsoft.public.windows.group_policy

  http://social.technet.Microsoft.com/forums/en/categories/ MS - MVP - Elephant Boy computers - don't panic!