Group policy newbie

[Snookered]

I need to make some really basic changes to make our network just a bit more user friendly for teachers and pupils, but I've only ever had scant usage of it.

Can anyone recommend a book or website that helps explain the fundamentals of it, especially where to look in the first place.

The sort of things I want to do are along the lines of the following:

 

Turn CTRL-ALT-DEL off for KS1 children, Enable RDC on teacher pc's so that they can be accessed from home via VPN and change screen timeouts.

Any pointers would be greatly appreciated.

Cheers

[penfold]

Don't modify the default policy instead create a test GPO and link it to a test OU put a test computer into that one. Put a test user into it also and then play around with the computer/user policies. You can search all over the internet for advice but I found it was more helpful to have a bit of a play without affecting the end users until I was happy.

[Joanne]

Best thing is to just create a test area in active directory and have a play with a test computer. That's how I learned.

 

The Ctrl Alt Delete is in Computer Config > Policies > Windows Settings > Security Settings > Local Policies > Interactive Logon: Do not Require Ctrl Alt Delete (also recommend delete last user)

 

Not sure where the RDC one is.... It'll be knocking about in there though I recks.

[tmcd35]

A lot of GP is best picked up exploring the system. If at all possible your best setting your self up a small test rig. Perhaps using something like VirtualBox on a reasonable spec'd PC. Along side that the first of the MCSE exam books (http://www.amazon.co.uk/Installing-Configuring-Microsoft-Official-Academic/dp/1118511077/ref=sr_1_1?s=books&ie=UTF8&qid=1411129810&sr=1-1&keywords=microsoft+mcse) is well worth working you way through whether or not you actually go for the qualification.

[Jasbo]

"Group policy fundamentals, security and the managed desktop" by Jeremy Moskowitz

 

is a great book on gpo, it's just so flipping useful page after page, In fact I would rate it as one of my favourite IT books, it's a good read! God that sounds sad...

 

I went from "gpo zero to gpo hero" with this book and a virtual dc in a few months, highly recommend it

[Arthur]

In addition to the book @Jasbo mentioned (make sure you get the updated second edition), you should also checkout the following websites.

 

• grouppolicy.biz - The Best Practices section is a good place to start.
  
• gpsearch.azurewebsites.net - This website allows you to search for GPOs by name or keywords. It's run by Microsoft so should always be up-to-date.
  

[DanTheLacky]

Second the don't mess with the default group policy, ballsed up my test lab earlier playing with them.

[Snookered]

Many thanks for all the replies, especially those mentioning books and websites, (sorry for late reply didn't get any notifications that there had been replies)