System policy update from command line (WIN XP)?

[Jay]

Is there a way in WinXP that I can initiate a system
policy (the .pol) update from the command line?

I am using the NT4 system policy on XP and I noticed that
the result is not consistent, sometimes the policy will
get loaded and sometimes it won't (logout and log back in
to get it updated). I am trying to find a way to update
the policy manually every time a user logs in or
periodically. BTW, I am changing the
\HKEY_LM\System\CurrentControlSet\Control\Update stuff to
get the policy to loaded. The "GPUPDATE" command does not
seem to initiate this reload (didn't connect to the UNC
path to grab the .pol file).

The reason I am using NT4 pol is because that's the only
way (I know of) that I can apply policy to a local user
and not limit administrators access. The local security
policy limits also the administrator account and make this
task impossible. AD is not an option here so GPO is out of
the question. (Any other suggestion to do this would be
welcomed)

THANKS!

[Roger Abell]

Without AD local security applies to all accounts
equaly that are able to read system32\GroupPolicy
IIRemberC system policy is processed during login.
gpupdate only handles group policy, not system policy.
The first line provides info on how to exempt admin
accounts but use local group policy to control the rest.
You do however need to remove the Deny to admins
in order to edit/modify group policy settings, and then
remember to put it back on.

--
Roger Abell
Microsoft MVP (Windows, Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Jay" > wrote in message
...
> Is there a way in WinXP that I can initiate a system
> policy (the .pol) update from the command line?
>
> I am using the NT4 system policy on XP and I noticed that
> the result is not consistent, sometimes the policy will
> get loaded and sometimes it won't (logout and log back in
> to get it updated). I am trying to find a way to update
> the policy manually every time a user logs in or
> periodically. BTW, I am changing the
> \HKEY_LM\System\CurrentControlSet\Control\Update stuff to
> get the policy to loaded. The "GPUPDATE" command does not
> seem to initiate this reload (didn't connect to the UNC
> path to grab the .pol file).
>
> The reason I am using NT4 pol is because that's the only
> way (I know of) that I can apply policy to a local user
> and not limit administrators access. The local security
> policy limits also the administrator account and make this
> task impossible. AD is not an option here so GPO is out of
> the question. (Any other suggestion to do this would be
> welcomed)
>
> THANKS!