http://www.dslreports.com/forum/r20572888 en Tue, 01 Dec 2009 06:14:16 EDT Tue, 01 Dec 2009 06:14:16 EDT http://www.dslreports.com/forum/remark,20577920 dannyboy 950 : Ahhhh thank you very much for the explanation. Please to forgive my confusion. Will not worry about this anymore.]]> http://www.dslreports.com/forum/remark,20577920 Mon, 02 Jun 2008 13:37:54 EDT http://www.dslreports.com/forum/remark,20577894 bcastner : Again, there are Group Policy objects that can be, and are, managed outside of Group Policy.

Beginning with SP2, the firewall exceptions became a managed object. This however does not mean that you have group policy. You cannot have Group Policy if you are using a non-Active Directory joined workstation; and it is completely unsupported under XP Home in any case.

Do not let the overlap between how policy objects are internally implemented, and managed, and Group Policy as a formal feature of the OS. They are not the same thing.

For example, using the Group Policy Editor (GPEDIT) in XP Pro is a big convenience. However, that is not implementing Group Policy. I can understand the confusion. Certainly the internals of the process are the same anytime one makes a registry tattoo that effects all user accounts on a computer. That is the internals of how Group Policy works as well. But these internal considerations do not add up to Group Policy as being active under XP Home.

--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users

]]> http://www.dslreports.com/forum/remark,20577894 Mon, 02 Jun 2008 13:31:48 EDT http://www.dslreports.com/forum/remark,20577525 dannyboy 950 : Event Type: Success Audit
Event Source: Security
Event Category: Policy Change
Event ID: 848
Date: 5/31/2008
Time: 5:25:43 PM
User: NT AUTHORITY\SYSTEM
Computer: DANNY
Description:
The following policy was active when the Windows Firewall started.

Group Policy applied: Yes
Profile used: Standard
Interface: All interfaces
Operational mode: Off
Services:
File and Printer Sharing: Disabled
Remote Desktop: Disabled
UPnP Framework: Disabled
Allow remote administration: Disabled
Allow unicast responses to multicast/broadcast traffic: Disabled
Security Logging:
Log dropped packets: Enabled
Log successful connections Enabled
ICMP:
Allow incoming echo request: Enabled
Allow incoming timestamp request: Disabled
Allow incoming mask request: Disabled
Allow incoming router request: Disabled
Allow outgoing destination unreachable: Disabled
Allow outgoing source quench: Disabled
Allow outgoing parameter problem: Disabled
Allow outgoing time exceeded: Disabled
Allow redirect: Disabled
Allow outgoing packet too big: Disabled

For more information, see Help and Support Center at »go.microsoft.com/fwlink/events.asp.]]> http://www.dslreports.com/forum/remark,20577525 Mon, 02 Jun 2008 12:24:03 EDT http://www.dslreports.com/forum/remark,20577320 bcastner : No Group Policies are applied in XP Home.
Nor on any non-Domain Active Directory joined workstation, XP Home or Pro, or Vista.

For special controls -- notably on the GUI, Explorer, and Control Panel applets -- the NT family has depended on registry entries to indicate whether a feature is enabled or not.

For example, your Wallpaper choices are registry "tattoos". While you could in a manged setting make everyone's Wallpaper identical through Group Policy, the fact the you can configure this on a stand-alone Workstation does not make it a Group Policy application.

The use of registry "tattoos", deprecated under NT6 and onwards, is what causes confusion. In some cases the active Group Policy object uses the same internal feature as would a user setting made through the GUI to achieve certain ends. However, in a setting with Group Policy active, you changes if allowed would not persist. They would be reset at every logon by Group Policy.

--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users

]]> http://www.dslreports.com/forum/remark,20577320 Mon, 02 Jun 2008 11:49:12 EDT http://www.dslreports.com/forum/remark,20576814 dannyboy 950 : The reason I made this post is I have been finding entries in my evnt logs for group policys being applied.
Now from my own scant knowledge XP Home did not use Group Policy.

Posting here bcaster kindly confirmed my thoughts.

Takeing these into consideration and upon reflection and furtherr testing,
paying particular attention to what exactly was covered in these policies. I propose this hypothosiss for your consideration.

Almost all of the policies corresponed to user preference settings and the like. Others match things that certain apps might change.

I think XP Home treats and records these as Group policies being applied

I would appreciate all of your thoughts on this.]]> http://www.dslreports.com/forum/remark,20576814 Mon, 02 Jun 2008 10:07:30 EDT http://www.dslreports.com/forum/remark,20573366 bcastner : No.

You could do this by creating a little .CMD file and place it in C:\Documents and Settings\your user name\Start Menu\Programs\Startup

The entire file, easily created with Notepad:
eventvwr.msc

Be sure to give this little command file a "CMD" file extension for it to work. In the alternative, drop a copy of eventvwr.msc in the folder.

--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users

]]> http://www.dslreports.com/forum/remark,20573366 Sun, 01 Jun 2008 15:40:28 EDT http://www.dslreports.com/forum/remark,20572975 dannyboy 950 : Thanks all mebe a better question is; Is there default policies in XP home that event viewer would show being established after a reboot?]]> http://www.dslreports.com/forum/remark,20572975 Sun, 01 Jun 2008 13:48:19 EDT http://www.dslreports.com/forum/remark,20572952 bcastner : Some, not all, Group Policies work by "registry tattoos", and you can (as was said) use Regedit or other registry tools to duplicate the policy tattoos applied by GPEDIT. This only duplicates (in part) what a policy might do, it does not equal being Group Policy capable.

A listing of many of them can be found here: »www.j79zlr.com/gphome.php
]]> http://www.dslreports.com/forum/remark,20572952 Sun, 01 Jun 2008 13:43:37 EDT http://www.dslreports.com/forum/remark,20572905 Epyon9283 : It does you just don't get the editor (gpedit.msc). You can still make changes manually to the registry to get the same effect.]]> http://www.dslreports.com/forum/remark,20572905 Sun, 01 Jun 2008 13:31:15 EDT http://www.dslreports.com/forum/remark,20572888 dannyboy 950 : LOL the header is the question.]]> http://www.dslreports.com/forum/remark,20572888 Sun, 01 Jun 2008 13:28:24 EDT