We will hopefully be moving to Windows 7 workstations in the summer, has anybody got any tips on the best way to create the GPO's for W7 workstations. Can we just use the exisiting XP GPO's or is it best to duplicate the GPO's with WMI filtering for the different OS's, checking which of the XP GPO settings will no longer apply to W7.
Thanks.
Time and testing! There are many, many new settings in the new GPs. I exported my exisiting XP GPO to a new one, then started tweaking and altering on a test machine with it. Had to lose all my old logon scripts, some printer settings, etc. Had to add settings for Libraries, themes, network settings etc. It can be a big job, but just take your time, change just the settings you need, test, then tweak some more.
Once done, my staff and student policies work fine on both XP and 7, I don't need to use WMI filtering.
badders (26th January 2011)
I'm still applying my old XP gpo's to win 7. But have the win 7 machine in an OU below the xp OU and applying a seperate policy to win 7 machines via loop back processing. Any policies that aren't relevant to win 7 don't apply and vice versa. We still have the odd old bit of kit still on XP and they both work in this type of setup.
I duplicated the xp polices and then added all the w7 settings I wanted and used WMI filters myself as some settings were not the same as the xp policy.
Think I'll get a w7 vm installed and start looking at how the current GPO's apply and then create duplicates and tweak.
All our scripts still worked on 7 and most xp policies, only needed to look at folder sync gpo.
Could you expand on this please?Originally Posted by ZeroHour
Duplicated - as I just copied and renamed?
Added the w7 settings - how? By editing the adm file on a w7 pc?
I intend to follow something along your lines and use the WMI filter...but just starting out with w7 so any help would be great...
I just used my existing ones then whent through and looked at the extra setting for 7. I creteated a temp GPO ten using a 7 test machine applied my current policies and the temp gpo. Spent ages tweeking and playing got what I wanted then copied the settings into my main GPO so it covered very PC.
I'd also recomend finding out how to script the pinning of items to the startmenu and task bar if you don't already know how to do it.
Duplicated using gpmc and renamed to windows 7, to do the wmi filter look at the Windows 7 Gotchas/Tips sticky thread here: Windows 7 Gotchas/Tips/FYI
Hmm it all looks okay, can you do a gpresult (its in the gpmc too) and see what it says.
ah
It somehow had kept some cache of the desktop so it looked like all was well....
Once I deleted from the C:\Users folder the test users folder (named 199) and re-logged on it did indeed NOT do the desktop redirecting.
Progress!
Next question - how do I prevent the local data from caching the desktop?
bugger
that caused a problem...."you have been logged on with a temporary profile windows 7 you cannot access your files"
fixed using this guide:
Temporary profile is loaded when logged on to the computer.
sighs...
I would heavily recommend starting from scratch and using WMI filters for sepoate XP and 7 Policies as I have lost count of how many questions I have answered on this forum alone that have been caused by slightly corupted GPOs or settings that have not converted quite right.
My personal solutions to GPOs is to start fresh, read through all of the options and set the ones that need setting. Clean policies mean clean and quick logons without extrenuous registry fragments for XP being pumped into your fresh Windows 7 registry hives.
Thats in the gotchas thread toobugger
that caused a problem...."you have been logged on with a temporary profile windows 7 you cannot access your files"
fixed using this guide:
Temporary profile is loaded when logged on to the computer.
sighs...Windows 7 Gotchas/Tips/FYI
There are currently 1 users browsing this thread. (0 members and 1 guests)
Posting Permissions
LinkBack URL
About LinkBacks
Reply With Quote
