+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 16
Windows Thread, Group Policy Starting from Scratch in Technical; Hi, We currently have Winsuite running our policies in school - don't ask !! I am looking to remove it ...
  1. #1

    Join Date
    Apr 2007
    Location
    York
    Posts
    559
    Thank Post
    10
    Thanked 4 Times in 4 Posts
    Rep Power
    20

    Group Policy Starting from Scratch

    Hi,
    We currently have Winsuite running our policies in school - don't ask !!
    I am looking to remove it - we are going to upgrade the server to 2008 and its not compatible.

    For group policy - is it a case of going through everything one at a time or can someone send me a policy template for staff and pupils ? I know every school is different but it would be nice not having to start from scratch

    Thanks

  2. #2
    rh91uk's Avatar
    Join Date
    Sep 2008
    Location
    UK
    Posts
    877
    Thank Post
    137
    Thanked 132 Times in 114 Posts
    Rep Power
    36
    If I was you, I would go through it all yourself. It may take you a while, but with the proper forward planning it should be fine.

    Then you should know how your network is designed; and any snags that could possibly occurr.

  3. #3
    danrhodes's Avatar
    Join Date
    Sep 2008
    Location
    Wath Upon Dearne
    Posts
    1,513
    Thank Post
    157
    Thanked 181 Times in 150 Posts
    Rep Power
    68
    Go through the settings one by one, it does take a while but at least you can documents exatly how the network is setup.

    D

  4. #4

    Join Date
    Jun 2007
    Location
    London
    Posts
    894
    Thank Post
    64
    Thanked 171 Times in 140 Posts
    Rep Power
    55
    Agree with the above - it'll also make it far easier to troubleshoot if something doesn't work to your exact requirements.

  5. #5
    danrhodes's Avatar
    Join Date
    Sep 2008
    Location
    Wath Upon Dearne
    Posts
    1,513
    Thank Post
    157
    Thanked 181 Times in 150 Posts
    Rep Power
    68
    Quote Originally Posted by timzim View Post
    Agree with the above - it'll also make it far easier to troubleshoot if something doesn't work to your exact requirements.
    Yeah, this way if you ever need to chance a fine setting it will hae been documented and you will ahve no trouble finding it easily as sometimes you can spend ages trawling through GP's!

    D

  6. #6
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,403
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    My recommendation for this would be to (as people have said) go through yourself and make your own, however I would suggest making a standard user GPO (one which has everything locked down you want locking down etc and applies to everyone) and then create other GPOs to unlock any extras you find staff need, extras that any admin users in your own OU require etc.

    As you can tell, this is based on having all your users in your own OU as well and not the default USERS one that comes with.

    I find this way it's a lot easier to then lock down a security loophole instead of having to go through a number of GPOs.

  7. Thanks to soveryapt from:

    speckytecky (24th May 2010)

  8. #7
    danrhodes's Avatar
    Join Date
    Sep 2008
    Location
    Wath Upon Dearne
    Posts
    1,513
    Thank Post
    157
    Thanked 181 Times in 150 Posts
    Rep Power
    68
    Good point, create a base GPO that is really tied down and then allow as requested for staff and other pupils.

  9. #8

    Join Date
    Jun 2007
    Location
    London
    Posts
    894
    Thank Post
    64
    Thanked 171 Times in 140 Posts
    Rep Power
    55
    Quote Originally Posted by aptproductions View Post
    My recommendation for this would be to (as people have said) go through yourself and make your own, however I would suggest making a standard user GPO (one which has everything locked down you want locking down etc and applies to everyone) and then create other GPOs to unlock any extras you find staff need, extras that any admin users in your own OU require etc
    Disadvantage of this is that your logon times will increase as your PCs have to parse a load more GPs than they need to.

  10. #9
    danrhodes's Avatar
    Join Date
    Sep 2008
    Location
    Wath Upon Dearne
    Posts
    1,513
    Thank Post
    157
    Thanked 181 Times in 150 Posts
    Rep Power
    68
    I know what aptp means it just need's wording better, I think he means to create 1 policy that is really tied down, then copy it and then allow certain parts for say staff, not have one tied down and then others to unblock as that would be plain daft!

    D

  11. Thanks to danrhodes from:

    soveryapt (24th May 2010)

  12. #10
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,403
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    Quote Originally Posted by danrhodes View Post
    I know what aptp means it just need's wording better, I think he means to create 1 policy that is really tied down, then copy it and then allow certain parts for say staff, not have one tied down and then others to unblock as that would be plain daft!

    D
    Yup, pretty much. Sorry, it's been a long day today .. lol ..

  13. #11
    danrhodes's Avatar
    Join Date
    Sep 2008
    Location
    Wath Upon Dearne
    Posts
    1,513
    Thank Post
    157
    Thanked 181 Times in 150 Posts
    Rep Power
    68
    I knew what you meant aptp, it's Monday that's my excuse!

    D

  14. #12
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,403
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    Quote Originally Posted by danrhodes View Post
    I knew what you meant aptp, it's Monday that's my excuse!

    D
    Mine is long walk up big hill saturday, partying with friends sunday, trying to recover whilst working on a monday .. lol ..

  15. #13
    danrhodes's Avatar
    Join Date
    Sep 2008
    Location
    Wath Upon Dearne
    Posts
    1,513
    Thank Post
    157
    Thanked 181 Times in 150 Posts
    Rep Power
    68
    Oh I'm recovering from 2 relaxing days sunning myself in the garden with the other half and a fair few Vodka/Tonic/Ice and Slice's. ;-)

  16. #14
    jsnetman's Avatar
    Join Date
    Oct 2007
    Posts
    887
    Thank Post
    23
    Thanked 134 Times in 126 Posts
    Rep Power
    40
    Don't go over board and set settings on every object, start with just a view basic settings like folder/desktop redirection and build up as you go. I would guess I don't use 80% of group policy, the 20% I do use is sufficient to lock the dektops down. Microsoft provide templates for various scenarios it used to be called intellimirror.

  17. #15

    Join Date
    Feb 2008
    Location
    Portsmouth
    Posts
    163
    Thank Post
    16
    Thanked 18 Times in 13 Posts
    Rep Power
    17
    Also it may be a good idea to use mandatory profiles for the pupils otherwise the logon times can increase dramatically especially over wireless.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 3
    Last Post: 22nd February 2010, 05:39 PM
  2. Replies: 2
    Last Post: 6th January 2010, 02:46 PM
  3. Group policy
    By ricki in forum Wireless Networks
    Replies: 5
    Last Post: 29th February 2008, 01:40 PM
  4. Group policy etc
    By moiebus in forum Wireless Networks
    Replies: 20
    Last Post: 8th November 2006, 11:48 PM
  5. setting up group policy from scratch
    By projector1 in forum Windows
    Replies: 9
    Last Post: 6th October 2006, 02:57 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •