GPO's to make a school Network

[nicholab]

To help people who what to set up a new vanilla network can we creat a list of Group Policey Objects that you need to make an eductioan network?

Admins
Could this Become a sticky?

[_Bat_]

I'd be interested in this as well .

[rlculver]

Hi,

I will be interested in this as well

Any pre-defined GPO's would be great

[tosca925]

Good Idea

[richard]

I'd be interested as well.

[andyrite]

I'd be very intrested as well. I'm in the process of removing ranger from the network.

[john]

I would say over 50% of them are needed to make a good secure network.

[srochford]

That might be a bit over the top - there are over 800 in system.adm alone!


http://www.microsoft.com/downloads/d...displaylang=en lists all the settings so you can have a look at what's availble (really useful when you think it ought to be possible to do "X" but can't find it in the console!

Sharing is always good but one of the things I've found over the years is that some of the things I think are absolutely essential to run a decent network others will look at and think "uuhhh??? - why??" and vice versa :-)

[GrumbleDook]

You mean you don't have the perfect setup? Damn ... I've been following the wrong messiah!

[andy]

Sounds ideal for the Wiki doesn;t it? (once it becomes unlocked!)



Andy

[starscream]

I have been wondering this for a long time and wouldn't need to buy Ranger if there was some place to get the GPOs. That's all I am buying ranger for really, to make like easier and so that no area is left open.

[PiqueABoo]

Gosh, you can't move in here for people volunteering to actually make these things. Could have sworn I seen the anti-CC3 et al people say it's only a five minute job as well ;b

I'm not volunteering either because I know it's big/hard, but if someone does have the energy to work on this then I'd aim to make pre-configured registry.pol files and obviously with any ADMs you might need (more or less self documenting once you get them in GPMC and turn off unconfigured settings).

[ZeroHour]

sounds good but seems like it could lead to a "too many cooks" thread lol.
My GPO rocks anyway so there :P

[bossman]

PiqueABoo: careful "big/hard" ohh err missus you no what i mean hehe!

[boomam]

I have a vanilla network here.

Ive got the domain level GPO specifying things like login text.
A gpo per user group for settings for those users.
A gpo per computer room to allocate specific printers.
GPOs over all the computers for specific software installs, one per software.
And the same again for settings.