+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 19 of 19
Windows Server 2000/2003 Thread, GPO design in Technical; Originally Posted by plexer Does that remove the software from the clients though? Ben Depends on the option you choose ...
  1. #16

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    6,069
    Thank Post
    902
    Thanked 1,013 Times in 825 Posts
    Blog Entries
    9
    Rep Power
    350
    Quote Originally Posted by plexer View Post
    Does that remove the software from the clients though?

    Ben
    Depends on the option you choose when you remove the software from the GPO. You can leave existing install, but stop the software from installing on any new machines. Or you can remove all existing installs of the software immediately (well next reboot).


    I'm currently working on a GPO structure here, ready for the summer. Heres my Current thoughts

    OUR DOMAIN - <no GPO's here>
    ++ All Computers - All Comp Software GPO, All Comp Policys GPO
    ++++ Staff Comp - All Staff Software GPO, All Staff Policys GPO
    ++++++ Admin Comp - Admin Only Software GPO, Admin Only Policys GPO
    ++++++ Teach Comp - Teachers Only Software GPO, Teachers Only Policys GPO
    ++++ Student Comp - All Curric Software GPO, All Curric Policy GPO
    ++++++ ICT Comp - ICT Only software GPO, ICT Only Policy

    ect, etc.

    So software only gets installed onto computers it needs to be installed on. Software install policys are kept separate from policy settings. I find this the most flexible system.

  2. #17

    sparkeh's Avatar
    Join Date
    May 2007
    Posts
    7,231
    Thank Post
    1,446
    Thanked 1,859 Times in 1,252 Posts
    Blog Entries
    22
    Rep Power
    559
    Quote Originally Posted by powdarrmonkey View Post
    Well, somewhere along the line the client has to find out what objects are applied to the OU it's in, and that means evaluating them all. I believe it's done client-side, but I'll be stuffed if I can find my notes on it (might have thrown them away) so don't quote me on it.
    Ah right thanks for alerting me, I'll looking into this more.

    However I guess its just a case of going, "am I in this OU? No - Am in this OU? Yes -> processes GPO"
    Wouldnt add to much overhead would it? I still have a small number of OUs.
    Last edited by sparkeh; 29th April 2009 at 11:17 AM.

  3. #18

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,867
    Thank Post
    412
    Thanked 778 Times in 651 Posts
    Rep Power
    183
    Quote Originally Posted by sparkeh View Post
    Ah right thanks for alerting me, I'll looking into this more.

    However I guess its just a case of going, "am I in this OU? No - Am in this OU? Yes -> processes GPO"
    Wouldnt add to much overhead would it? I still have a small number of OUs.
    Finding out which OU you're in is a one-time check, but then each policy object has to be evaluated to find out whether or not it applies to that OU. This is the costly part, but as for numbers I have none. I've never had time nor inclination to actually generate lots of GPOs and measure the results, but at one time the official MS advice was that it made a difference.

  4. #19
    sjl
    sjl is offline
    sjl's Avatar
    Join Date
    Apr 2009
    Location
    Liverpool
    Posts
    62
    Thank Post
    17
    Thanked 20 Times in 15 Posts
    Rep Power
    15
    <AD root>
    ###|--------<OU = Servers>
    ###|##########|---<GPO = Server Software>
    ###|
    ###|--------<OU = Workstations>
    ##############|
    ##############|------<GPO = General School Software>
    ##############|
    ##############|------------------------<OU = Local>
    ####################################|
    ####################################|-----<OU = Room xx>
    ##############################################|
    ##############################################|----<GPO = Room xx Software>


    That is a bit of ours we also use WMI filters and Security filters to filter who gets the GPO applied.
    Last edited by sjl; 29th April 2009 at 03:14 PM.



SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. Help with printing design
    By bio in forum Network and Classroom Management
    Replies: 2
    Last Post: 30th July 2008, 02:39 PM
  2. Database Design
    By Hightower in forum General Chat
    Replies: 6
    Last Post: 16th June 2008, 05:22 PM
  3. Design - Best Webpage you have ever seen?
    By Zoom7000 in forum General Chat
    Replies: 26
    Last Post: 4th June 2008, 01:03 PM
  4. New 2D Design talking to the Old Mill Design
    By Sean in forum Educational Software
    Replies: 5
    Last Post: 15th January 2008, 10:26 AM
  5. Website Design
    By Simcfc73 in forum How do you do....it?
    Replies: 40
    Last Post: 25th September 2006, 03:24 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •