CC4/gpo/start menu question

[sparkeh]

A colleague of mine has a question regarding a CC4 setup, any help much appreciated:

 

Urgent request:

 

We have cc4 network we built a set of machines with out the rm software on. But due to time at moment we can’t separate from GPO (as not got time to sort and test a gpo setup).

 

So the machines are just logging into domain and they are pickup the gpos set by rm side and then we are sorting software locally on machines.

 

This for now works well apart from one problem which is that we are cc4 and we are not using roaming profiles as such which means no start menu as stndel on a rm machine pulls the start menu etc.

 

So need some ideas on how we can get start menu sorted but one thing we do need to be able to do is allow users to log both into cc4 machines and these machines as well

 

Ideas?

[Jose]

create a folder called "vanilla desktops" place it in RMpublic share.

Inside this folder put all shortcuts that you need, create sub folders for each subject and then put the program shortcuts and shortcuts to shard resources inside these.

 

Then create a batch file that will run at startup on the OU that contains the vanilla machines. your batch should look something like this.

 

cd..

del "c:\documents and settings\all users\desktop\*.*" /s /q

del "c:\documents and settings\default user\desktop\*.*" /s /q

 

xcopy \\whsg-dc1\rmpublic\vanilladesktops "c:\documents and settings\all users\desktop" /e /y

cls

 

This batch copies over the contents of the "vanilla desktops" folder when the computer startup, so anything you want them to have just dump inside the "vanilla desktops" folder, then restart the computers.

[Jose]

Just in case that does not work try these

 

without knowing what you want or dont want to propergate from the cc3 policies I'll just stick to the desktop issues.

 

You need a way of making sure that users get the shortcuts that you want them to have.

IF you force local profiles on that OU unit and configure the gpo that contains both the batch and the policy that forces the local profile then it should work fine. The batch runs as a computer startup script.

 

If you still want users to have their roaming profiles then you could edit the batch to copy onto their desktops ( c:\windows\documents and settings\%username%\desktop)

Then make sure you disable saving roaming profiles on that OU.

 

Use group policy manager on that OU to see what order the policies are applying to the machines, you should change the order so your own ones go on last.

 

Making a new OU outside of the cc3 area would be best but if you cant do that then this * might* work for stopping machine policies.

 

create a security group called vanilla machines and add all vanilla PCs to that group.

once you know which CC3 policies are applying to that OU deny read and apply access to the vanilla machines security group.

 

How this helps

[sparkeh]

Thanks for your input

 

An update:

 

Update

 

I have created a new gpo with standard RM gpo and made it last in the list of gpos. If I have security filtering set as default all users across the network get the GPO. If I remove security settings and add in a single computer the single computer does not get the setting applied.

 

Anyideas?