To create a new policy for a domain

1	On the File menu, click New Policy.

2	To specify the computers to which your Registry-setting changes will apply, you can do the following:

Double-click Default User to change HKEY_CURRENT_USER Registry settings for all computers on the domain.

Double-click Default Computer to change HKEY_LOCAL_MACHINE Registry settings for all computers on the domain.

3	To add to the Registry settings, click Commands on the Edit menu to do the following:

To change HKEY_CURRENT_USER for specific users, click Add User.

To change HKEY_LOCAL_MACHINE for specific computers, click Add Computer.

To change HKEY_CURRENT_USER for specific groups click Add Group.

4	If necessary, finish configuring policy settings for any other policy files you have added, and then click Save As on the File menu.

5	In Save in, specify the Netlogon folder on the primary domain controller (PDC), such as:

\\PDCServerName\netlogon.

6	In File name, type NTconfig.pol, and click Save.

The policy is enforced on each computer running Windows NT Workstation or Windows NT Server when users log on.

Notes

In System Policy Editor, double-click a book icon to see the available settings. If a policy is checked, the policy will be implemented. For example, if Hide Network Neighborhood is checked, then Network Neighborhood will not appear on the desktop.

Use Server Manager to configure Directory Replication. Replicate the Netlogon folder from the PDC to all backup domain controllers (BDCs).

 Related Topics


To have clients receive policy updates from non-controller servers

1	While at the individual computer, click Open Registry on the File menu.

Or, on the File menu, click Connect, and then specify a computer name.

2	Double-click Default Computer.

3	Click the plus sign beside Network.

4	Click the plus sign beside System policies update, and then click Remote update.

5	To have registry process error messages displayed on client computers, click Display error messages.

6	To download the policy file from a server other than domain controllers, click Manual (use specific path) in Update mode, and then provide the specific path.

7	If necessary, finish configuring policy settings for any other policy files on the computer, and then save the policy files in the appropriate folder.

Make sure the policy file has a .pol extension.

Note

{bmct bullet.bmp	You can access the Registry only on computers for which you have administrative permission.


To set group priority

1	On the Options menu, click Group Priority.

2	Click a group in Group Order, and click Move Up or Move Down.

Groups highest on the list have the highest priority.

Note

The order in which groups are evaluated is important if some users belong to more than one group for which policy is defined and if the policy settings in two or more of these groups contain different settings for the same policy. To specify which policy has priority, use Group Order to order the groups.


To add policy templates

1	Close all policy files.

2	Copy any .adm files to the Windows NT Inf folder (typically C\winnt\inf).

3	On the System Policy Editor Options menu, click Policy Template.

4	Click Add.

5	Specify the policy template (.adm) file name, and then click Open.

Note

Software vendors can develop policy templates to enable policy to be implemented for their applications. For information on creating new policy templates, see the Microsoft Win32 Software Developers Kit (SDK).

 Related Topics


To remove policy templates

1	Close all policy files.

2	On the Options menu, click Policy Template.

3	Click the policy template you wish to remove, and then click Remove.

 Related Topics


To modify the Registry on a remote computer

1	On the File menu, click Connect.

2	Type the name of the remote computer.

3	In the Users on Remote Computer dialog box, click the user that is interactively logged on, and then click OK.

Typically, there is only one user logged on.

4	Double-click Local User to change HKEY_CURRENT_USER Registry settings.

5	Double-click Local Computer to change HKEY_LOCAL_MACHINE Registry settings.

6	On the File menu, click Save.

7	On the File menu, click Disconnect.

Note

You can access the Registry only on computers for which you have administrative permission. The computer can be running any version of Windows NT Workstation or Windows NT Server.


Click Help Topics to return to the list of topics.