With the addition of Group Policy to Windows 2000, multiple types of policies can be applied to Windows 2000 users and computers. Administrators may want to control which types of policies are applied when a slow link is detected. For example, a user who dials in over a slow link may not want to perform an installation of a program that could take several hours. This article describes the default behavior of Group Policy extensions that are included with Windows 2000 over slow links and how to customize the behavior of each type of extension.
When a slow link is detected, the default behavior is as follows:
Policies that are applied by default:
- Registry settings (from administrative templates) must always be applied--this cannot be changed
- Security policies must always be applied - this cannot be changed)
- EFS recovery policy
- IP security
Policies that are not applied:
- Application Deployment
- Folder Redirection
- Disk Quotas
The administrator can change the default behavior on workstations by modifying or creating a Group Policy Object (GPO) to define the types of Group Policy that should be applied. The following example can be implemented on any GPO where necessary to affect the appropriate users or groups:
- In the Active Directory Users and Computers Microsoft Management Console (MMC) snap-in, right-click the object that processes the GPO that you want to modify, and then click Properties.
- Click the Group Policy tab, click the group policy object that you want to modify, and then click Edit.
- Under the Computer Configuration node, navigate to the Administrative Templates\System\Group Policy folder. The following policies to change the default behavior for each of the above types of Group Policy are available within this folder:
For example, to allow Folder Redirection to run when a slow link is detected, double-click Folder Redirection policy processing to open the properties for that policy, select the Folder Redirection processing check box (click until there is not a gray background) to enable the policy, select the Allow processing across a slow network connection check box, and then click OK.
- Registry policy processing (the default behavior cannot be changed)
- Folder redirection policy processing
- Disk quota policy processing
- Scripts policy processing
- Security policy processing (the default behavior cannot be changed)
- EFS recovery policy processing
- Software installation policy processing
- IP security policy processing
- Close the Group Policy MMC snap-in.
"Scripts policy processing" to "Allow processing across a slow network connection" should be interpreted as only logon/logoff scripts from the user configuration of the Group Policy. Scripts from the computer configuration (startup/shutdown) will not be processed over a slow link.