summaryrefslogtreecommitdiff
path: root/docs/docbook/projdoc/PolicyMgmt.sgml
diff options
context:
space:
mode:
authorJohn Terpstra <jht@samba.org>2003-04-04 03:52:35 +0000
committerJohn Terpstra <jht@samba.org>2003-04-04 03:52:35 +0000
commit2e629a17bb8ede16a6e82ccece82428b0801aaf3 (patch)
treeca72c34448ed7700b3fab8fdd2b220bbaa5763db /docs/docbook/projdoc/PolicyMgmt.sgml
parent94e5719dac45baffc5f5dad6e045ac99999c76e9 (diff)
downloadsamba-2e629a17bb8ede16a6e82ccece82428b0801aaf3.tar.gz
samba-2e629a17bb8ede16a6e82ccece82428b0801aaf3.tar.bz2
samba-2e629a17bb8ede16a6e82ccece82428b0801aaf3.zip
More docs updates. Much more under way.
(This used to be commit ed6fd02ff806c7cda9fb05fe3b2bf96be164c1ec)
Diffstat (limited to 'docs/docbook/projdoc/PolicyMgmt.sgml')
-rw-r--r--docs/docbook/projdoc/PolicyMgmt.sgml89
1 files changed, 66 insertions, 23 deletions
diff --git a/docs/docbook/projdoc/PolicyMgmt.sgml b/docs/docbook/projdoc/PolicyMgmt.sgml
index 6eb3a09a97..1dc4dd435d 100644
--- a/docs/docbook/projdoc/PolicyMgmt.sgml
+++ b/docs/docbook/projdoc/PolicyMgmt.sgml
@@ -11,10 +11,10 @@
</author>
<pubdate>April 3 2003</pubdate>
</chapterinfo>
-<title>Policy Management - Hows and Whys</title>
+<title>System and Account Policies</title>
<sect1>
-<title>System Policies</title>
+<title>Creating and Managing System Policies</title>
<para>
Under MS Windows platforms, particularly those following the release of MS Windows
@@ -36,7 +36,7 @@ a part of the MS Windows Me Resource Kit.
<para>
MS Windows NT4 Server products include the <emphasis>System Policy Editor</emphasis>
-under the <filename>Start->Programs->Administrative Tools</filename> menu item.
+under the <filename>Start -> Programs -> Administrative Tools</filename> menu item.
For MS Windows NT4 and later clients this file must be called <filename>NTConfig.POL</filename>.
</para>
@@ -51,9 +51,9 @@ be a step forward, but improved functionality comes at a great price.
<para>
Before embarking on the configuration of network and system policies it is highly
-advisable to read the documentation available from Microsoft's web site from
+advisable to read the documentation available from Microsoft's web site regarding
<ulink url="http://www.microsoft.com/ntserver/management/deployment/planguide/prof_policies.asp">
-Implementing Profiles and Policies in Windows NT 4.0</ulink> available from Microsoft.
+Implementing Profiles and Policies in Windows NT 4.0 from http://www.microsoft.com/ntserver/management/deployment/planguide/prof_policies.asp</ulink> available from Microsoft.
There are a large number of documents in addition to this old one that should also
be read and understood. Try searching on the Microsoft web site for "Group Policies".
</para>
@@ -64,22 +64,22 @@ here is incomplete - you are warned.
</para>
<sect2>
-<title>Creating and Managing Windows 9x/Me Policies</title>
+<title>Windows 9x/Me Policies</title>
<para>
You need the Win98 Group Policy Editor to set Group Profiles up under Windows 9x/Me.
It can be found on the Original full product Win98 installation CD under
-<filename>tools/reskit/netadmin/poledit</filename>. You install this using the
+<filename>tools/reskit/netadmin/poledit</filename>. Install this using the
Add/Remove Programs facility and then click on the 'Have Disk' tab.
</para>
<para>
Use the Group Policy Editor to create a policy file that specifies the location of
-user profiles and/or the <filename>My Documents</filename> etc. stuff. You then
+user profiles and/or the <filename>My Documents</filename> etc. stuff. Then
save these settings in a file called <filename>Config.POL</filename> that needs to
-be placed in the root of the [NETLOGON] share. If your Win98 is configured to log onto
+be placed in the root of the [NETLOGON] share. If Win98 is configured to log onto
the Samba Domain, it will automatically read this file and update the Win9x/Me registry
-of the machine that is logging on.
+of the machine as it logs on.
</para>
<para>
@@ -87,7 +87,7 @@ Further details are covered in the Win98 Resource Kit documentation.
</para>
<para>
-If you do not do it this way, then every so often Win9x/Me will check the
+If you do not take the right steps, then every so often Win9x/Me will check the
integrity of the registry and will restore it's settings from the back-up
copy of the registry it stores on each Win9x/Me machine. Hence, you will
occasionally notice things changing back to the original settings.
@@ -104,7 +104,7 @@ Win9x/Me machine that uses group policies.
</sect2>
<sect2>
-<title>Creating and Managing Windows NT4 Style Policy Files</title>
+<title>Windows NT4 Style Policy Files</title>
<para>
To create or edit <filename>ntconfig.pol</filename> you must use the NT Server
@@ -136,20 +136,20 @@ location is with the Zero Administration Kit available for download from Microso
<sect3>
<title>Registry Tattoos</title>
-<para>
-With NT4 style registry based policy changes, a large number of settings are not
-automatically reversed as the user logs off. Since the settings that were in the
-NTConfig.POL file were applied to the client machine registry and that apply to the
-hive key HKEY_LOCAL_MACHINE are permanent until explicitly reveresd. This is known
-as tattooing. It can have serious consequences down-stream and the administrator must
-be extreemly careful not to lock out the ability to manage the machine at a later date.
-</para>
+ <para>
+ With NT4 style registry based policy changes, a large number of settings are not
+ automatically reversed as the user logs off. Since the settings that were in the
+ NTConfig.POL file were applied to the client machine registry and that apply to the
+ hive key HKEY_LOCAL_MACHINE are permanent until explicitly reversed. This is known
+ as tattooing. It can have serious consequences down-stream and the administrator must
+ be extremely careful not to lock out the ability to manage the machine at a later date.
+ </para>
</sect3>
</sect2>
<sect2>
-<title>Creating and Managing MS Windows 200x Policies</title>
+<title>MS Windows 200x / XP Professional Policies</title>
<para>
Windows NT4 System policies allows setting of registry parameters specific to
@@ -201,7 +201,7 @@ exists with NT4 style policy files.
</para>
<sect3>
-<title>Administration of Win2K Policies</title>
+<title>Administration of Win2K / XP Policies</title>
<para>
Instead of using the tool called "The System Policy Editor", commonly called Poledit (from the
@@ -212,7 +212,7 @@ executable name poledit.exe), GPOs are created and managed using a Microsoft Man
<itemizedlist>
<listitem>
<para>
- Go to the Windows 200x / XP menu <filename>Start->Programs->Adminsitrative Tools</filename>
+ Go to the Windows 200x / XP menu <filename>Start->Programs->Administrative Tools</filename>
and select the MMC snap-in called "Active Directory Users and Computers"
<para>
</listitem>
@@ -258,4 +258,47 @@ use this powerful tool. Please refer to the resource kit manuals for specific us
</sect2>
</sect1>
+
+<sect1>
+<title>Managing Account/User Policies</title>
+
+<para>
+Document what are user policies (ie: Account Policies) here.
+</para>
+
+<sect2>
+<title>With Windows NT4/200x</title>
+
+<para>
+Brief overview of the tools and how to use them.
+</para>
+
+<sect3>
+<title>Windows NT4 Tools</title>
+
+<para>
+Blah, blah, blah ...
+</para>
+
+</sect3>
+
+<sect3>
+<title>Windows 200x Tools</title>
+
+<para>
+Blah, blah, blah ...
+</para>
+
+</sect3>
+</sect2>
+
+<sect2>
+<title>With a Samba PDC</title>
+
+<para>
+Document the HOWTO here.
+</para>
+
+</sect1>
+
</chapter>