Gruppenrichtlinien: Unterschied zwischen den Versionen

Aus Doku-Wiki
Zur Navigation springenZur Suche springen
Zeile 15: Zeile 15:
 
  '''\%systemroot%\inf'''
 
  '''\%systemroot%\inf'''
 
===Update auf IE 7.0 verhindern===
 
===Update auf IE 7.0 verhindern===
ADM-Vorlage von Microsoft
+
ADM-Vorlage von Microsoft
 
  CLASS MACHINE
 
  CLASS MACHINE
 
CATEGORY !!CAT_WindowsComponents
 
CATEGORY !!CAT_WindowsComponents
Zeile 33: Zeile 33:
 
END CATEGORY
 
END CATEGORY
 
END CATEGORY
 
END CATEGORY
 
+
[strings]
+
[strings]
CAT_WindowsComponents="Windows Components"
+
CAT_WindowsComponents="Windows Components"
CAT_WindowsUpdate="Windows Update"
+
CAT_WindowsUpdate="Windows Update"
CAT_Blockers="Automatic Updates Blockers"
+
CAT_Blockers="Automatic Updates Blockers"
 
   
 
   
 
  NoUpdate="Do not allow delivery of Internet Explorer 7 through Automatic Updates"
 
  NoUpdate="Do not allow delivery of Internet Explorer 7 through Automatic Updates"
  NoUpdate_Explain="If you enable this policy you will disable delivery of Internet Explorer 7 through Automatic Updates.\n\nInternet Explorer 7 includes important security improvements, so Microsoft strongly recommends that customers deploy this update as soon as possible.\n\nHowever, this policy setting allows organizations not using Systems Management Server (SMS), Software Update Services (SUS) or another update management solution and needing more time to plan the rollout of the Internet Explorer 7 to disable the delivery through Automatic Updates.\n\nThis policy setting does not prevent installation of Internet Explorer 7 through other mechanisms such as SMS, SUS, product disk and so on.\n\nIf you disable or do not configure this policy setting, Internet Explorer 7 will be available as an update through Automatic Updates.\n\nNOTE: This setting does not disable Automatic Updates or access to Windows Update. Nor does it prevent delivery of updates other than Internet Explorer 7 through Windows Update or Automatic Updates."
+
  NoUpdate_Explain="If you enable this policy you will disable delivery of Internet Explorer 7 through Automatic
 +
Updates.\n\nInternet Explorer 7 includes important security improvements, so Microsoft strongly recommends that  
 +
customers deploy this update as soon as possible.\n\nHowever, this policy setting allows organizations not using  
 +
Systems Management Server (SMS), Software Update Services (SUS) or another update management solution and  
 +
needing more time to plan the rollout of the Internet Explorer 7 to disable the delivery through Automatic  
 +
Updates.\n\nThis policy setting does not prevent installation of Internet Explorer 7 through other mechanisms
 +
such as SMS, SUS, product disk and so on.\n\nIf you disable or do not configure this policy setting, Internet
 +
Explorer 7 will be available as an update through Automatic Updates.\n\nNOTE: This setting does not disable
 +
Automatic Updates or access to Windows Update. Nor does it prevent delivery of updates other than Internet
 +
Explorer 7 through Windows Update or Automatic Updates."
 
  SUPPORTED_WindowsXPServer03="At least Microsoft Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1"
 
  SUPPORTED_WindowsXPServer03="At least Microsoft Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1"
  

Version vom 10. November 2006, 16:45 Uhr

GP aktualisieren

Wie kann ich erreichen, daß meine getroffenen Einstellungen auf dem Client sofort wirksam werden? Website zu Gruppenrichtlinien
Doku

  • Unter Windows 2000 für den Benutzer:
           secedit /refreshpolicy user_policy /enforce 
  • Unter Windows 2000 für den Computer:
           secedit /refreshpolicy machine_policy /enforce 
  • Unter Windows XP für den Benutzer:
           gpupdate /target:user /force /wait:0
  • Unter Windows XP für den Computer:
           gpupdate /target:computer /force /wait:0

ADM-Files

Speicherort

\%systemroot%\inf

Update auf IE 7.0 verhindern

ADM-Vorlage von Microsoft
CLASS MACHINE

CATEGORY !!CAT_WindowsComponents

 		CATEGORY !!CAT_WindowsUpdate

CATEGORY !!CAT_Blockers POLICY !!NoUpdate #if version >= 4 SUPPORTED !!SUPPORTED_WindowsXPServer03 #endif EXPLAIN !!NoUpdate_Explain

     					KEYNAME "SOFTWARE\Microsoft\Internet Explorer\Setup\7.0"
     					VALUENAME "DoNotAllowIE70"
     					VALUEON  NUMERIC 1
     					VALUEOFF NUMERIC 0

END POLICY

 			END CATEGORY

END CATEGORY END CATEGORY

[strings]
CAT_WindowsComponents="Windows Components"
CAT_WindowsUpdate="Windows Update"
CAT_Blockers="Automatic Updates Blockers"

NoUpdate="Do not allow delivery of Internet Explorer 7 through Automatic Updates"
NoUpdate_Explain="If you enable this policy you will disable delivery of Internet Explorer 7 through Automatic
Updates.\n\nInternet Explorer 7 includes important security improvements, so Microsoft strongly recommends that 
customers deploy this update as soon as possible.\n\nHowever, this policy setting allows organizations not using 
Systems Management Server (SMS), Software Update Services (SUS) or another update management solution and 
needing more time to plan the rollout of the Internet Explorer 7 to disable the delivery through Automatic 
Updates.\n\nThis policy setting does not prevent installation of Internet Explorer 7 through other mechanisms  
such as SMS, SUS, product disk and so on.\n\nIf you disable or do not configure this policy setting, Internet  
Explorer 7 will be available as an update through Automatic Updates.\n\nNOTE: This setting does not disable  
Automatic Updates or access to Windows Update. Nor does it prevent delivery of updates other than Internet  
Explorer 7 through Windows Update or Automatic Updates."
SUPPORTED_WindowsXPServer03="At least Microsoft Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1"