Choice Options disabled by Default?

[user]

Archived from groups: microsoft.public.win2000.setup_deployment (More info?)

Anyone know why in the "Default Domain Policy" three of the four RIS Choice
options are disabled by default? If I disable the user part of the Default
Domain Policy will it cause a problem in my domain?

Thanks

 

[Guest]

Archived from groups: microsoft.public.win2000.setup_deployment (More info?)

This is the policy that applies to ANY user in your domain. So, a user could
do nasty things, like boot into RIS, select "Custom Install", then create
computer accounts in OUs he should not be able to join. Or interfere with an
existing machine on the network, by taking on that name in Custom Setup.

Be careful disabling the user portion of the Default Domain Policy - It Will
Have Side Effects You Do Not Intend.

The better option is to set up another GPO, applied to the OU that your
Administrators are in, or filtered with security permissions to only apply to
the users you want to execute custom installs. In _that_ GPO, set the RIS
options to give the rights you want the users/admins to have.

"-" wrote:

> Anyone know why in the "Default Domain Policy" three of the four RIS Choice
> options are disabled by default? If I disable the user part of the Default
> Domain Policy will it cause a problem in my domain?
>
> Thanks
>
>
>