+ Post New Thread
Results 1 to 10 of 10
Windows Thread, setting up group policy from scratch in Technical; hi having arrived at the school a couple of years ago, and worked on a system that had set gpos ...
  1. #1
    projector1's Avatar
    Join Date
    Nov 2005
    Posts
    460
    Thank Post
    70
    Thanked 1 Time in 1 Post
    Rep Power
    18

    setting up group policy from scratch

    hi
    having arrived at the school a couple of years ago, and worked on a system that had set gpos already setup, i am know confident enough to create some new policies for our laptops.
    I would like some advice on where to start, set up a stations policy and one for users or implement one for both.
    My users are going to be
    pupils
    staff
    admins

  2. #2
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,009
    Thank Post
    120
    Thanked 282 Times in 260 Posts
    Rep Power
    108

    Re: setting up group policy from scratch

    You could just set up new OUs and attach your new policies to them. That way you can experiment with a few and sling em back to their old OUs should you have problems

  3. #3

    Join Date
    Apr 2006
    Location
    West Midlands
    Posts
    314
    Thank Post
    29
    Thanked 19 Times in 18 Posts
    Rep Power
    20

    Re: setting up group policy from scratch

    I would start from the very beginning with a new OU - and sub OU. So my structure for Group Policy is:

    Domains:

    +Default Domain Policy

    +School Name
    ==Internet GPO
    ==FolderRedirectionGPO

    ++StaffOU
    ===StaffLoginGPO
    ===StaffLockDownGPO
    +++English Faculty
    +++Maths ...etc

    ++StudentsOU
    ===StudentLockDownGPO
    +++Intake2006
    ===Intake2006LoginGPO

    ++Community
    ===StudentLockDownGPO
    +++AdultEd
    ===AdultEdGPO

    ++Workstations
    +++Room Name N3C
    +++Room name... etc..

  4. #4
    projector1's Avatar
    Join Date
    Nov 2005
    Posts
    460
    Thank Post
    70
    Thanked 1 Time in 1 Post
    Rep Power
    18

    Re: setting up group policy from scratch

    where would you set your proxy?
    i thought i would add the proxy settings to the workstation policy so that if it ever changed or needed re configuring then i would only have to change one policy.
    However when i addes the proxy settings to the policy for workstations i did not get it to apply. I tried gpupdate /force. I tried restarting.
    I then remove the entries and then applied them to users policy and it worked.
    The pc i used is in the ou that has the workstation policy applied

  5. #5

    Join Date
    Feb 2006
    Posts
    1,187
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: setting up group policy from scratch

    Loopback?

  6. #6

    Join Date
    May 2006
    Posts
    159
    Thank Post
    5
    Thanked 10 Times in 5 Posts
    Rep Power
    18

    Re: setting up group policy from scratch

    You will want to be using as few GPO's as possible. The more you have, the longer it will take to process and logon. If you can get away with just one policy with all your settings, then do it.

    If you are only setting user settings in a policy, make sure to disable computer processing for that GPO (and vice versa). I have found this to make a big difference to logon times.

    Those are the actual Microsoft guidelines for configuring GPO's.

  7. #7

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,611
    Thank Post
    1,496
    Thanked 1,051 Times in 920 Posts
    Rep Power
    303

    Re: setting up group policy from scratch

    Its all good saying have 1 big GPO, but then testing and GPO fault finding is much harder. I am not saying have 1000's of them but you do need a few to do it. I have about 10 on the last system I setup and that works well, logons are about 30 seconds which is not bad at all.

  8. #8
    contink's Avatar
    Join Date
    Jul 2006
    Location
    South Yorkshire
    Posts
    3,791
    Thank Post
    303
    Thanked 327 Times in 233 Posts
    Rep Power
    118

    Re: setting up group policy from scratch

    Quote Originally Posted by projector1
    where would you set your proxy?
    i thought i would add the proxy settings to the workstation policy so that if it ever changed or needed re configuring then i would only have to change one policy.
    However when i addes the proxy settings to the policy for workstations i did not get it to apply. I tried gpupdate /force. I tried restarting.
    I then remove the entries and then applied them to users policy and it worked.
    The pc i used is in the ou that has the workstation policy applied
    You want to take a look at this thread...

    http://www.edugeek.net/index.php?nam...er=asc&start=0


    The key problem you're most likely hitting is the lack of the hotfix...

  9. #9
    contink's Avatar
    Join Date
    Jul 2006
    Location
    South Yorkshire
    Posts
    3,791
    Thank Post
    303
    Thanked 327 Times in 233 Posts
    Rep Power
    118

    Re: setting up group policy from scratch

    Quote Originally Posted by john
    Its all good saying have 1 big GPO, but then testing and GPO fault finding is much harder. I am not saying have 1000's of them but you do need a few to do it. I have about 10 on the last system I setup and that works well, logons are about 30 seconds which is not bad at all.
    Have to agree... it helps to have more rather than fewer when you're starting out as you can track problems much easier.

    Right now I have about erm... well 40 GPO's but in the main they're handling managed installs so the key settings ones number just 4... Login times are a bit slow but then I haven't really compared with policies on or off as yet.

  10. #10
    projector1's Avatar
    Join Date
    Nov 2005
    Posts
    460
    Thank Post
    70
    Thanked 1 Time in 1 Post
    Rep Power
    18

    Re: setting up group policy from scratch

    i am just setting up the hide drives and prevent access

    i have been told you should not edit the system.adm file. I have experimented by copying the adm file and then renaming it, making my changes. However what do set the save as type and the encoding. Is it type = txt doc and encoding is unicode?
    How have you folks setup the hide drives/ prevent access
    I have been looking at GPDriveOptions.exe but i want to set ip up myself so that i can start learning about adms

    thanks

SHARE:
+ Post New Thread

Similar Threads

  1. Group policy
    By pedster666 in forum Hardware
    Replies: 5
    Last Post: 27th February 2008, 10:03 AM
  2. Setting up the Password Policy on domain.
    By tosca925 in forum Windows
    Replies: 5
    Last Post: 13th June 2007, 08:28 PM
  3. Setting password policy at OU level.
    By tosca925 in forum Windows
    Replies: 9
    Last Post: 5th June 2007, 05:36 PM
  4. Group policy etc
    By moiebus in forum Wireless Networks
    Replies: 20
    Last Post: 8th November 2006, 11:48 PM
  5. Group Policy
    By faza in forum Windows
    Replies: 15
    Last Post: 23rd May 2006, 09:39 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •