Re: Testing out Windows 10 in an IT room

[networkmanager]

Hello,

 

Hope someone can help with this.

 

Following tests and configuration, in order to kick off our phased migration, we are now looking to roll out our Windows 10 1709 image to one of our IT suites during February half-term break. This would mean we would have a mixture of existing Windows 7 and newly imaged Windows 10 machines until the whole school is migrated, which might be during the summer holidays.

 

My question is, what is the best or most effective way to implement the GPOs for Windows 10? Such that when a user moves from a Win 7 IT room to a Win 10 IT room (and vice-versa), all the relevant computer and user policies will be applied without fail.

 

Two ideas came to mind. Firstly, create new Computer and User OUs (for Windows 10) and attach the relevant Windows 10 GPOs. Secondly, leave my AD structure as it is but configure Windows 10 policies within the existing Windows 7 policies.

 

Your thoughts will be appreciated.

 

Thank you in advance.

[DalekSec]

Personally i would make a new OU for the Windows 10 Devices and leave the Win 7 ones alone, once all the Win 7s have been upgraded to 10 remove the old OU.

 

Keep the housekeeping in order and nice and tidy!

[dapaulio]

My Personal opinion would be to create all group policies with the prefix "W10_" then create "Computers W10" OU with all the relevant computer applied GPO prefixed "W10_", using the original users OU, create all user applied GPO's with WMI filtering enabled for W10.

 

You would need to create a wmi filter for windows 7 and alter all your win 7 gpo's also

[3s-gtech]

The two sit alongside each other just fine, just as 8.1 and 7 and 7/XP did. Pays to have separate profiles, and some GPOs are best set with a WMI filter to stop them running unnecessarily.

We still have a small number of 7 devices, and the transition is pretty seamless between them.

[FN-GM]

The solution provided by @DalekSec will only work for computer settings.

 

I used WMI filters and kept everything in the existing OU. I set a WMI filter on my existing polices so they only apply to Windows 7 and then create new Windows 10 policies with a WMI to apply to Windows 10 only. This solution works for both computer and user policies and is fully automatic. Not need to change groups or OU etc.

[forkies]

+1 for WMI filtering on gpo when having a roll out of win 10

[networkmanager]

Thank you all for your suggestions. Much appreciated.

 

I have used WMI filters on the existing and new policies as @FN-GM suggested. Works a treat.

 

Cheers!