Alan, Also, be aware that Group Policy refresh is not instant... by default, it refreshes every 90 minutes + a random interval of up to 30 minutes (so every 90 to 120 minutes). If you need the timing to be very precise, you should schedule gpupdate.exe to run on all your systems at a time just slightly after the time you change the GPO (give it a few minutes for the GPO to replicate to all domain controllers). Otherwise, your changes may be delayed by as much as 2 hours from the time you modify the GPO.
Matt Clark Unit Head, Desktop Services IT Department UCSD Libraries >>> "Alan Peck" <[EMAIL PROTECTED]> 06/29/05 10:18PM >>> Thanx Matt, I try the first method, if that fails I at least can use the 2nd method of editing the GPO file directly. The file format of GPO is rather straight forward, thus can be easily manipulated using Perl scripts. What I could do is create copies of the GPO file elsewhere, modify them. Then have a perl script copy the required GPO file into the correct location at the appropriate time. Thanx all for your advice. Alun >>> "Matt Clark" <[EMAIL PROTECTED]> 06/29/05 8:17 PM >>> Alan, All of the settings within Administrative Templates are basically just registry settings, but the file format they're stored in is different than the normal registry hive file format. You may have some luck trying to modify them by use of the IGroupPolicyObject interface ( http://msdn.microsoft.com/library/en-us/policy/policy/igrouppolicyobject.asp ), which looks like it can load them and return standard registry handles for editing (see the OpenDSGPO, GetRegistryKey, and Save methods). Don't think that's been implemented in Perl, but I'm not entirely sure. Alternatively, you could just read and edit the file with your Perl script... the file format is here: http://msdn.microsoft.com/library/en-us/policy/policy/registry_policy_file_format.asp Hope that helps. Matt Clark Unit Head, Desktop Services IT Department UCSD Libraries >>> "Alan Peck" <[EMAIL PROTECTED]> 06/29/05 03:14AM >>> They are under the user part of the GPO, mostly under the administrative template. The main group of settings are for which applications may be used by the user, what is not allowed to be used, plus other handy windows environment settings. Alun >>> "Matt Clark" <[EMAIL PROTECTED]> 06/29/05 10:12 AM >>> Could you be more specific about what GPO settings you want to alter? Are they administrative templates, advertised applications, etc? Matt Clark Unit Head, Desktop Services IT Department UCSD Libraries >>> "Alan Peck" <[EMAIL PROTECTED]> 06/28/05 10:59PM >>> Is this possible using Perl scripts: To alter the values (including lists) of GPO's attributes? I need to impliment some form of time controlled GPOs for speciallized groups. I know Win2K3 still does not support GPO values merging (not inherintance or overriding) and no time control features thus must some how manipulate the GPOs using scripts. Thanx Alun ------------------------------------------------------------------ Tshwane University of Technology ------------------------------------------------------------------ This email is sent and received in terms of the Electronic Communications Policy of Tshwane University of Technology. In line with this policy, this email is private, priviledged and confidential. The full text of the Electronic Mail Disclaimer can be seen on the TUT web site at http://www.tut.ac.za/goto/emaildisclaimer or obtained by phoning (012) 318-5911 <<<<gwavasig>>>> _______________________________________________ Perl-Win32-Users mailing list [email protected] To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs _______________________________________________ Perl-Win32-Users mailing list [email protected] To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs _______________________________________________ Perl-Win32-Users mailing list [email protected] To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs _______________________________________________ Perl-Win32-Users mailing list [email protected] To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs _______________________________________________ Perl-Win32-Users mailing list [email protected] To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs _______________________________________________ Perl-Win32-Users mailing list [email protected] To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs
