Windows System Policy Editor

Errata for Windows System Policy Editor

Submit your own errata for this product.


The errata list is a list of errors and their corrections that were found after the product was released. If the error was corrected in a later version or reprint the date of the correction will be displayed in the column titled "Date Corrected".

The following errata were submitted by our customers and approved as valid errors by the author or editor.

Color Key: Serious Technical Mistake Minor Technical Mistake Language or formatting error Typo Question Note Update



Version Location Description Submitted By Date Submitted Date Corrected
Printed
Page xi
The second-to-last URL in the "How to Contact Us" section now reads

http://www.oreilly.com/catalog/syspe Should read: http://www.oreilly.com/catalog/9781565926493/

Anonymous   
Printed
Page 5

In the last sentence of the paragraph under "Workstation," change "group policies" to "Group Policies."

Anonymous   
Printed
Page 24

The last paragraph in the sidebar "Remote Update" should not be indented.

Anonymous   
Printed
Page 32
before the "Conflicts" section

The following text should be inserted in Chapter 3 before the "Conflicts" section (**NOTE: due to space constraints, we are unable to make this change in a reprint**): Windows Millenium Edition (Me) Windows Me is an attractive OS for communal workstations. It shows greater compatibility with older hardware and software than Windows 2000, and unlike Windows 9x, it has file protection features. Specifically, System File Protection (SFP) and System Restore. The SFP runs as a background process, monitoring any changes made to a protected database of files. If one of these files is deleted, or replaced with a version not authorized by Microsoft, the SFP will invisibly replace the file from a hidden copy on the hard drive. System Restore automatically monitors and records changes made to essential Windows system files; files with a .sys, .exe, .com, .vxd, or .dll extension. System Restore does not record changes made to user created files. If Windows begins to function improperly, using Restore points the user can rollback the computer to an earlier date when it was functioning properly. See the Microsoft Knowledgebase article Q267951 for more information on these file protection features. Using System Policies with Windows Me Unfortunately, Microsoft clearly states that Windows Me does not support the use of the system policy editor, since it does not support the use of a policy file (see Knowledgebase article Q266271). But never being one to listen to advice, I decided to look into using Windows Me with system policies. The registry settings necessary for using system policies, Remote Update and Enable User Profiles, exist in Windows Me. Automatic Remote Update is typically enabled by default. Upon enabling user profiles, I discovered that Windows Me will in fact automatically download from the network, and import into its registry, the computer and user policies found within a Config.pol file. I have successfully used the Admin.adm template, as well as many of the Shell.adm policies in a number of different User policies on these workstations. I was also able to replicate the same user conflicts that occur in Windows 9x. In spite of this success, it is important to note that policy use was less than perfect if Active Desktop was enabled. Wallpaper settings, in particular, are completely ignored. With Active Desktop disabled, I was unable to find any problems with the templates I tested. Since I have not completed any long term testing, and in light of Microsoft's warning, I am not quite ready to whole-heartedly endorse the use of policies on a Window Me workstation. However, the file protection features make its use tempting enough for me to agree that it is worth trying on a few test workstations. I would suggest first disabling Active Desktop on the workstation itself and also within the Config.pol file. This can be accomplished on the workstation by selecting the option to use Windows classic desktop--found under the General tab of the Control Panel applet Folder Options. In the policy file it can be disabled using the user policy Desktop->Desktop Restrictions->Disable Active Desktop found in the Shell.adm template. See Chapter 4 for more information on using templates to create a policy file.

Anonymous   
Printed
Page 46
In Figure 3-13, the box in the bottom left corner that currently reads

"Specific computer policy is applied to the registry" Should read: "Default computer policy may be active for any corresponding computer setting left in the grayed position"

Anonymous   
Printed
Page 46
bottom of Figure 3-13

In both of the gray boxes at the bottom of Figure 3-13, change "setting" to "settings".

Anonymous   
Printed
Page 82
The 3rd line of the batch file (setup.bat) now reads

cdWindows Should read: CDWindows

Anonymous   
Printed
Page 82
The 9th line of the batch file (setup.bat) now reads

echo y | deltree c:windowsprofiles Should read: DELTREE /Y C:WINDOWSPROFILES*.*

Anonymous   
Printed
Page 93
The second paragraph of the Tip now reads

Since the Windows NT logon processor does not support setting environment variables in Windows 9x workstations, use the utility winset.ext (available in the Windows 98 Resource Kit). The syntax is the same as for the MS-DOS Set command. To set the username variable, you can use the following command in the Windows NT logon script or from a batch file: WINSET USERNAME=%USERNAME% It should read: Since the Windows NT logon processor does not support setting environment variables in Windows 9x workstations, use the two utilities winset.exe (available in the Windows 98 Resource Kit) and putinenv.exe (available for download at http://www.orca.bc.ca/win95/putinenv.exe). To set the username variable in a Windows 9x workstation, copy putinenv.exe and winset.exe to the domain controller's NETLOGON share, then add these lines to the login script or a batch file: \servernameNETLOGONPUTINENV L \servernameNETLOGONWINSET USERNAME=%USERNAME%

Anonymous   
Printed
Page 93

In the paragraph under the Tip, delete "(line indents... previous one)".

Anonymous   
Printed
Page 93
The 4th line of the batch file at the bottom of the page now reads

ECHO Y | DELTREE C:WINDOWSPROFILES Should read: DELTREE /Y C:WINDOWSPROFILES*.*

Anonymous   
Printed
Page 93
Lines 6-8 of the batch file at the bottom of the page now read

MD C:WINDOWSPROFILES ;CHANGE TO THE WINDOWS DIRECTORY CDWINDOWS Should read (note 2 lines added): IF NOT EXIST C:WINDOWSPROFILESNUL MD C:WINDOWSPROFILES ;CREATE THE LOCAL SUBDIRECTORY FOR THE USER'S PROFILE MD C:WINDOWSPROFILES\%USERNAME% ;MAKE SURE YOU ARE IN THE CORRECT DIRECTORY CDWINDOWSPROFILES

Anonymous   
Printed
Page 94

The last line of the batch file at the top of the page now reads REGEDIT /S PROFILES.REG Should read: REGEDIT /S C:WINDOWSPROFILES.REG

Anonymous   
Printed
Page 94
The 4th line of the Perl script now reads

`deltree /y c:\windows\profiles`; Should read: `deltree /y c:\windows\profiles\*.*`;

Anonymous   
Printed
Page 94

The following lines should be inserted between lines 6 and 7 of the Perl script: #create the local subdirectory for the user's profile `md c:\windows\profiles\$ENV{username}`; #change to the correct directory `cd c:\windows\profiles`;

Anonymous   
Printed
Page 112
The second paragraph now reads

"If you would like to limit access to individual applets not listed in the standard policy templates, you can create..." Should read: "If you have Windows NT workstations and would like to limit access to individual applets not listed in the standard policy templates, you can create..."

Anonymous   
Printed
Page 136

The problem "The Windows NT shell loads before the user's logon script completes" should show the reference (Reference: Q186475) in the Explanation and Solution column instead of the Problem column.

Anonymous   
Printed
Page 148

At the end of the second paragraph under "User Conflicts," change "Username" to "<Username>", and make it constant width italic.

Anonymous   
Printed
Page 174

In the first paragraph under "COMBOBOX," the words in all caps should be in constant width.

Anonymous   
Printed
Page 182
first paragraph

In lines 7-8 of the first paragraph, change "ADDITIVE could be used if the user wanted to..." to "ADDITIVE could be used if I wanted to..."

Anonymous   
Printed
Page 185
Table 8-11

The registry key in Table 8-11 is now listed as SoftwareMicrosoftCurrentVersionPoliciesExplorer Should be: SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

Anonymous   
Printed
Page 186
second paragraph under "Putting It Together"

In the second paragraph under "Putting It Together," change "Tables 8-11 through 8-11" to "Tables 8-7 through 8-11."

Anonymous   
Printed
Page 187

The 3rd line from the bottom of the page (END PART) should be indented one level less than it is (to the left).

Anonymous   
Printed
Page 188

The first line on the page (END POLICY) should be indented one level.

Anonymous   
Printed
Page 193
Figure 9-1

The numbers in the right-hand side of Figure 9-1 are incorrect. A pointer is missing (#2), so 2-5 currently point to the wrong sections. #2 should point to the Packet Management directory 5 lines up from where it currently points. #3 should point to where #2 currently points. #4 should point to where #3 currently points. #5 should point to where #4 currently points. #6 should point to where #5 currently points.

Anonymous   
Printed
Page 504
In the description for Cpanel.adm, change:

"...applets from being displayed in Windows 9x or Windows NT4 workstations." to: "...applets from being displayed in Windows NT4 workstations."

Anonymous