If a Windows NT 4.0 client computer is upgraded to Windows XP, the computer receives only Computer Configuration Group Policy, not Windows NT 4.0 computer System Policy. The policy that is received by the user who logs on is User Configuration Group Policy, if the user account is in Active Directory If the user account is managed by a Windows NT 4.0 domain controller, the user receives Windows NT 4.0 user System Policy.
For more information, see Computer Configuration and User Configuration
Policies that are included with Windows XP or Windows 2000 set registry keys and values only in one of these four reserved trees:
| • | HKEY_LOCAL_MACHINE\Software\Policies |
| • | HKEY_CURRENT_USER\Software\Policies |
| • | HKEY_LOCAL_MACHINE\Software\Microsoft\ |
| • | HKEY_CURRENT_USER\Software\Microsoft\ |
The first two trees are preferred. All four trees are secure, and they cannot be modified by a user who is not an administrator.
When Group Policy changes for any reason, these trees are wiped clean and the new policies are rewritten.
Windows NT 4.0 policies do not respect these special trees, and they can write to any part of the registry After such a policy is applied, it persists until the value is intentionally reversed, either by a counteracting Windows NT 4.0-style policy or by editing the registry.
| • | It is possible, using the procedure to add or remove an Administrative Template (.adm file), for Administrative Templates to be added to Group Policy that set registry values outside the approved Windows XP Group Policy trees, although Windows XP does not include any such .adm file. Choosing to install Windows NT 4.0-style .adm files can lead to undesirably persistent registry settings. For more information, see Administrative Templates and To add or remove an Administrative Template (.adm file) If you must use the procedure in this manner, see the information about the Only show policy settings that can be fully managed check box in To filter the view provided by Administrative Templates and the information about the Enforce Show Policies Only Group Policy setting in To add or remove an Administrative Template (.adm file) |
For more information, see:
| • | |
| • | |
| • | |
| • | |
| • | |
| • |