Windows Server 2000/2003 Thread, GPO Advice in Technical; Hi guys, im setting up my first server from scratch and as im fairly new to administration i was after ...
13th October 2010, 02:24 PM #1
Hi guys, im setting up my first server from scratch and as im fairly new to administration i was after some advice. what policies do you set for users?? iv set the particular ones i want but its likely iv missed some. so to the point... what do you set for users?
Thanks for your help
14th October 2010, 07:24 AM #2
This surely is a tough question. This depends on what you want to achieve here. This best way to learn GPO and their behavior is by testing, testing and testing.
I would setup a lab (vmware or something) and just play around with the various settings. You could start out with login/logout sripts and folder redirection, changing some settings on the desktop or internet explorer. Also check this :
Learning about GPO's - KWSupport
14th October 2010, 10:28 AM #3
all done, thanks. i just plowed through every policy possible and got exactly what i wanted. working very well now, thanks!!
17th October 2010, 12:02 PM #4
- Rep Power
I dont know your level of experience with Group Policy but heres the best advice I can give...
A good rule of thumb with Group Policy is to make separate policies for each task you are trying to accomplish, rather than sticking everything in one big policy. Also, try not to edit the default group policy objects, leave them alone and create your own.
For example, when you want to set up redirected folders, stick all the related config in one GPO, when you want to setup desktop restrictions, stick all of thant in its own GPO. Deploying browser settings? stick that in its own GPO. It makes it much much easier when you are having problems and need to debug your config. It also makes it easier for the next admin to see how your server is setup when you leave or something.
Also, get to grips with the debugging tools, RSOP is a great tool and should always be your first port of call when trying to work out why a GP setting isnt working.
Hope this is useful!
Thanks to joshd from:
tommccann (18th October 2010)
17th October 2010, 12:58 PM #5
This is exactly what I do, you can't underestimate the value of having read through the lot and knowing what is avalible.
Originally Posted by tommccann
An addition to the above advice, be careful not to use too many seporate policies as the more you have the more seporate passes must be run to configure each session and the longer it takes to logon. Multiple policies also increase bandwidth usage as they must be downloaded each time. It is a good idea to never mess with the default domain policy and to seporate out major roles like student policy, staff policy etc but don't get too fine grained or your policy processing time will get mental.
Thanks to SYNACK from:
tommccann (18th October 2010)
By andy_whitlock in forum Windows Server 2008 R2
Last Post: 15th July 2010, 01:48 PM
By DaveP in forum Windows Server 2008
Last Post: 6th July 2010, 08:45 PM
By mossj in forum Educational IT Jobs
Last Post: 14th May 2009, 09:32 PM
By pottski in forum Windows
Last Post: 11th December 2008, 08:52 AM
By projector1 in forum Wireless Networks
Last Post: 1st November 2006, 06:59 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)