chrisakak9 Posted November 20, 2014 Posted November 20, 2014 (edited) Hi all, I've got the fun tast of creating a new domain my school after DC died and no backup was usable. Only raw data. Looking for some ideas as whats best to set in group policies as many predated me. unless anyone knows if you can copy them from the backup on the sysvol folder. Edited November 20, 2014 by chrisakak9
jertsy Posted November 21, 2014 Posted November 21, 2014 Hi all, I've got the fun tast of creating a new domain my school after DC died and no backup was usable. Only raw data. Looking for some ideas as whats best to set in group policies as many predated me. unless anyone knows if you can copy them from the backup on the sysvol folder. I did all my group policies from scratch in the summer, if I were you I would decide how you want to deploy stuff for your users, i.e. profiles or folder redirection etc... I then locked down most of the obvious things like cmd prompt, regedit. But I learnt by sitting with a test PC\Uer and making changes GPO changes to see what the effect was. Its a pretty time intesive job to learn them but certainly do-able. I bought this book too Group Policy: Fundamentals, Security, and the Managed Desktop: Amazon.co.uk: Jeremy Moskowitz: Books Dont know about copying from sysvol as I have never tried.
zag Posted November 21, 2014 Posted November 21, 2014 Should be easy enough to do them from scratch, it only takes a few hours and usually works fine with trial and error. The biggest problem with a full domain rebuild is all the permissions and passwords, but even then you can just them out as temporary ones and get the user to change them.
mikkydoos Posted November 21, 2014 Posted November 21, 2014 I know its too late for you but... Whilst you're at it, get another old machine and set it up as a 2nd domain controller. Make sure u don't get the same headache again. I speak from woeful experience 1
Simcfc73 Posted November 21, 2014 Posted November 21, 2014 I know its too late for you but... Whilst you're at it, get another old machine and set it up as a 2nd domain controller. Make sure u don't get the same headache again. I speak from woeful experience Or look at Azure
chrisakak9 Posted November 22, 2014 Author Posted November 22, 2014 I know its too late for you but... Whilst you're at it, get another old machine and set it up as a 2nd domain controller. Make sure u don't get the same headache again. I speak from woeful experience Done this already set up as DC with DHCP fail-over so far, once I've some more HDDs I'll be setting it up with DFS on all shares and try to get it to a point of being able to take down one dc and the other take over completely.
chrisakak9 Posted November 22, 2014 Author Posted November 22, 2014 Just can't get any user GPOs to work at the min, they don't event show up in RSOP or GPRESULT
MatthewL Posted November 22, 2014 Posted November 22, 2014 Have you linked them to the relevant OU's where you users and computers are?
chrisakak9 Posted November 22, 2014 Author Posted November 22, 2014 Yep, think its something I missed in the default domain policy. Found my GPO backups from the old 2003 DC from before migration about 11 months ago, the basics are there and just need some updating. Just imported and tested them and they work! countless hours saved and some hair loss averted. only all the user accounts to make and add every pc to the domain now. Still running most things from scripts which were backed up, but kept the same DC hostname so that should save me some time too! Time to read up on GPOs again once this is done.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now