+ Post New Thread
Results 1 to 5 of 5
Windows Server 2000/2003 Thread, GPO Advice in Technical; Hi guys, im setting up my first server from scratch and as im fairly new to administration i was after ...
  1. #1
    tommccann's Avatar
    Join Date
    Jun 2009
    Posts
    252
    Thank Post
    46
    Thanked 39 Times in 31 Posts
    Rep Power
    0

    GPO Advice

    Hi guys, im setting up my first server from scratch and as im fairly new to administration i was after some advice. what policies do you set for users?? iv set the particular ones i want but its likely iv missed some. so to the point... what do you set for users?

    Thanks for your help

  2. #2
    bio
    bio is offline
    bio's Avatar
    Join Date
    Apr 2008
    Location
    netherlands
    Posts
    520
    Thank Post
    16
    Thanked 130 Times in 102 Posts
    Rep Power
    38
    This surely is a tough question. This depends on what you want to achieve here. This best way to learn GPO and their behavior is by testing, testing and testing.
    I would setup a lab (vmware or something) and just play around with the various settings. You could start out with login/logout sripts and folder redirection, changing some settings on the desktop or internet explorer. Also check this :

    Learning about GPO's - KWSupport

    bio..

  3. #3
    tommccann's Avatar
    Join Date
    Jun 2009
    Posts
    252
    Thank Post
    46
    Thanked 39 Times in 31 Posts
    Rep Power
    0
    all done, thanks. i just plowed through every policy possible and got exactly what i wanted. working very well now, thanks!!

  4. #4

    Join Date
    Oct 2010
    Posts
    12
    Thank Post
    0
    Thanked 7 Times in 2 Posts
    Rep Power
    10
    Hi Tommccann

    I dont know your level of experience with Group Policy but heres the best advice I can give...

    A good rule of thumb with Group Policy is to make separate policies for each task you are trying to accomplish, rather than sticking everything in one big policy. Also, try not to edit the default group policy objects, leave them alone and create your own.

    For example, when you want to set up redirected folders, stick all the related config in one GPO, when you want to setup desktop restrictions, stick all of thant in its own GPO. Deploying browser settings? stick that in its own GPO. It makes it much much easier when you are having problems and need to debug your config. It also makes it easier for the next admin to see how your server is setup when you leave or something.

    Also, get to grips with the debugging tools, RSOP is a great tool and should always be your first port of call when trying to work out why a GP setting isnt working.

    Hope this is useful!

  5. Thanks to joshd from:

    tommccann (18th October 2010)

  6. #5

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,204
    Thank Post
    876
    Thanked 2,729 Times in 2,308 Posts
    Blog Entries
    11
    Rep Power
    782
    Quote Originally Posted by tommccann View Post
    all done, thanks. i just plowed through every policy possible and got exactly what i wanted. working very well now, thanks!!
    This is exactly what I do, you can't underestimate the value of having read through the lot and knowing what is avalible.

    An addition to the above advice, be careful not to use too many seporate policies as the more you have the more seporate passes must be run to configure each session and the longer it takes to logon. Multiple policies also increase bandwidth usage as they must be downloaded each time. It is a good idea to never mess with the default domain policy and to seporate out major roles like student policy, staff policy etc but don't get too fine grained or your policy processing time will get mental.

  7. Thanks to SYNACK from:

    tommccann (18th October 2010)

SHARE:
+ Post New Thread

Similar Threads

  1. GPO - How do you do it?
    By andy_whitlock in forum Windows Server 2008 R2
    Replies: 3
    Last Post: 15th July 2010, 01:48 PM
  2. Replies: 0
    Last Post: 6th July 2010, 08:45 PM
  3. CV advice, and general Job searching advice
    By mossj in forum Educational IT Jobs
    Replies: 14
    Last Post: 14th May 2009, 09:32 PM
  4. EZ-GPO
    By pottski in forum Windows
    Replies: 3
    Last Post: 11th December 2008, 08:52 AM
  5. GPO deployment advice needed
    By projector1 in forum Wireless Networks
    Replies: 2
    Last Post: 1st November 2006, 06:59 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •