A. By default Windows 2000 based clients don't use NTCONFIG.POL but instead use Group Policy Objects (GPO) as defined in the Active Directory. NT 4.0 clients still use NTCONFIG.POL even in a 2000 domain.
It used to be possible (pre RC2, build 2128) to enable the 2000 clients to use NTCONFIG.POL however you should have a good reason as GPOs are superior to the old system policies. This has been removed due to complications in implementation.
To enable system policies (NTCONFIG.POL) perform the following pre build 2128 are as follows:
- Start the Active Directory Users and Computers MMC snap-in (Start - Programs - Administrative Tools - Active Directory Users and Computers)
- Right click on the root domain name, for example savilltech.com and select Properties
- Select the 'Group Policy' tab
- Select the 'Default Domain Policy' GPO and click Edit
- The Group Policy MMC snap-in will be started with the domain GPO at the root
- Move to Computer Configuration\Administrative Templates\System\Group Policy
- Double click 'Disable system policy' and set to Disabled. Click OK
Click here to view image
Disabling disable system policy means enable the system policy, two minus's make a plus :-) - Close the Group Policy MMC
The updated GPO will take effect on the client the next time you logon (it will actually take effect max 90 minutes after you make the change but this only affects logon).
This update actually changes registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableNT4Policy to 0.
