IntelliMirror Features without Active Directory

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

The full functionality of IntelliMirror® management technologies requires Active Directory and Group Policy. However, in an environment without Active Directory and Group Policy, some of the capabilities are available. You can still implement the following IntelliMirror features to manage clients running Windows 2000 or later:

• Roaming User Profiles and Logon Scripts

• Folder Redirection

• Internet Explorer Maintenance

• Administrative Templates (registry-based policy)

Roaming User Profiles and Logon Scripts

When using either a Windows NT 4.0 domain or Active Directory, both roaming user profiles and logon scripts are configured on the user object.

Folder Redirection

You can redirect special folders to alternate locations, either to a local or network location. You do this by modifying the values under the following registry key:

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

Each value is of type REG_SZ, and the data is the redirected path (either local or UNC). The table below lists the folders that may be redirected and their associated value name.

Internet Explorer Maintenance

Instead of using Group Policy to control Internet Explorer settings, administrators can use the Internet Explorer Administration Kit (IEAK) to apply settings to Internet Explorer clients using auto-configuration packages.

Applying Administrative Templates (Registry-Based Policy)

Domain-based Group Policy processing requires that the User and/or Computer objects be located in Active Directory. If the User or Computer objects are located in a Windows NT 4.0 domain, then Windows NT 4.0 System Policy will be processed for whichever of these objects is located in that domain—this could be the Computer or User object, or both. System Policy is defined as the policy mechanism used natively in Windows NT 4.0; it is a set of registry settings that together define the computer resources available to a group of users or an individual. (Also be aware that the local GPO is always processed prior to any System Policy.)

Setting Registry-based Policy in a Windows NT 4.0 Domain

A client running Windows 2000 or Windows XP Professional will process System Policy if either the user or computer account are in a Windows NT 4.0 domain. The client looks for the Ntconfig.pol file used by Windows NT 4.0-style System Policy. By default, it looks for this file in the NETLOGON file share of the authenticating Windows NT 4.0 domain controller.