Gruppenrichtlinien: Unterschied zwischen den Versionen

Aus Doku-Wiki
Zur Navigation springenZur Suche springen
Zeile 17: Zeile 17:
 
  [http://doku.fietz.net/images/IE70-Blocker.pdf Originaldokumentation Microsoft]
 
  [http://doku.fietz.net/images/IE70-Blocker.pdf Originaldokumentation Microsoft]
  
===Update auf IE 7.0 verhindern===
+
===ADM-Vorlage: Update auf IE 7.0 verhindern===
 
  ADM-Vorlage von Microsoft
 
  ADM-Vorlage von Microsoft
 
   CLASS MACHINE
 
   CLASS MACHINE

Version vom 10. November 2006, 15:50 Uhr

GP aktualisieren

Wie kann ich erreichen, daß meine getroffenen Einstellungen auf dem Client sofort wirksam werden? Website zu Gruppenrichtlinien
Doku

  • Unter Windows 2000 für den Benutzer:
           secedit /refreshpolicy user_policy /enforce 
  • Unter Windows 2000 für den Computer:
           secedit /refreshpolicy machine_policy /enforce 
  • Unter Windows XP für den Benutzer:
           gpupdate /target:user /force /wait:0
  • Unter Windows XP für den Computer:
           gpupdate /target:computer /force /wait:0

ADM-Files

Speicherort der ADM-Vorlagen

\%systemroot%\inf

Einbinden Eigener ADM-Vorlagen

Originaldokumentation Microsoft

ADM-Vorlage: Update auf IE 7.0 verhindern

ADM-Vorlage von Microsoft
 CLASS MACHINE
	CATEGORY !!CAT_WindowsComponents
  		CATEGORY !!CAT_WindowsUpdate
			CATEGORY !!CAT_Blockers
				POLICY !!NoUpdate
					#if version >= 4
						SUPPORTED !!SUPPORTED_WindowsXPServer03
					#endif
					EXPLAIN !!NoUpdate_Explain
      					KEYNAME "SOFTWARE\Microsoft\Internet Explorer\Setup\7.0"
      					VALUENAME "DoNotAllowIE70"
      					VALUEON  NUMERIC 1
      					VALUEOFF NUMERIC 0
				END POLICY
  			END CATEGORY
		END CATEGORY
	END CATEGORY

[strings]
CAT_WindowsComponents="Windows Components"
CAT_WindowsUpdate="Windows Update"
CAT_Blockers="Automatic Updates Blockers"

NoUpdate="Do not allow delivery of Internet Explorer 7 through Automatic Updates"
NoUpdate_Explain="If you enable this policy you will disable delivery of Internet Explorer 7 through Automatic
Updates.\n\nInternet Explorer 7 includes important security improvements, so Microsoft strongly recommends that 
customers deploy this update as soon as possible.\n\nHowever, this policy setting allows organizations not using 
Systems Management Server (SMS), Software Update Services (SUS) or another update management solution and 
needing more time to plan the rollout of the Internet Explorer 7 to disable the delivery through Automatic 
Updates.\n\nThis policy setting does not prevent installation of Internet Explorer 7 through other mechanisms  
such as SMS, SUS, product disk and so on.\n\nIf you disable or do not configure this policy setting, Internet  
Explorer 7 will be available as an update through Automatic Updates.\n\nNOTE: This setting does not disable  
Automatic Updates or access to Windows Update. Nor does it prevent delivery of updates other than Internet  
Explorer 7 through Windows Update or Automatic Updates."
SUPPORTED_WindowsXPServer03="At least Microsoft Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1"