witch Posted March 9, 2011 Posted March 9, 2011 I have looked at the forum but can't see an answer, or at least one that I understand! I am currently building a new Windows 7 desktop for imaging for my new 32 machine IT suite (I will have 33 netbooks as well). I have added it to the domain and it seems fine but it is not picking up any policies or drives or anything. Does anyone have a fix that is simple and understandable? I really need some help here - if I have to pay an external support bod there will be trouble
sukh Posted March 9, 2011 Posted March 9, 2011 Hi What do you mean it's not picking up any policies? As in GPO? The actual deployment works fine with no issues? This is post deployment issue? Thanks Sukh
3s-gtech Posted March 9, 2011 Posted March 9, 2011 Do you have any way of managing the Windows 7 .admx settings in Group Policy? If you're using the .adm settings native to 2003 and XP (Classic Administrative Templates) you won't be able to manage Vista and 7, and Server 2003 can't manage .admx.
witch Posted March 9, 2011 Author Posted March 9, 2011 Currently I have only begun to build one - I have put it on the domain and it is in the correct OU.(not quite THAT thick! - although it is possible ) I can browse to the server and access the drives - but the shared drives are not appearing - I know this is a Server 2003 issue but I am not sure how to get round it. I presume that some or all group policies are not being applied as I am not getting the desktop - which I KNOW is deployed via GP - or shutdownertron which is also a GP.
Sanchez Posted March 9, 2011 Posted March 9, 2011 Hi What results do get from 'gpresult /r' on the win 7 machine? That should tell you if it the policies are being picked and if they are it should give a reason why they are not applying. Sanch
witch Posted March 9, 2011 Author Posted March 9, 2011 Thanks - will do tomorrow when I am back in that school - should have thought of that - panic freezes the brain!
kennysarmy Posted March 9, 2011 Posted March 9, 2011 We are trialling win7 on a server 2003 domain. We have recreated / rewritten and created new policies for the windows 7 clients rather than risk the XP ones half-doing the job. We us WMI filtering to assign the policies. Hope that helps.
SpuffMonkey Posted March 9, 2011 Posted March 9, 2011 I think you need this The Angry Technician’s Guide to Managing Windows 7, you Idiots « The Angry Technician 1
sted Posted March 9, 2011 Posted March 9, 2011 Do you have any way of managing the Windows 7 .admx settings in Group Policy? If you're using the .adm settings native to 2003 and XP (Classic Administrative Templates) you won't be able to manage Vista and 7, and Server 2003 can't manage .admx. but you can if you install rsop on a win7 box just means to edit win7 inly bits you nweed to find a laptop annoying but livable with are the pcs just booting up too fast and not getting policies possibly try setting computer config\admin templates\system\group policy\startup process policy wait time 120 id also set computer config\admin templates\system\verbose vs normal status messages to enabled or any software deploy etc will just show please wait and you will have no idea what the pc is doing but that will need to be done from a win7 client (then on a test pc run gpupdate force /boot
witch Posted March 10, 2011 Author Posted March 10, 2011 (edited) I definitely need RSAT which I have now downloaded - still a bit nervous though. Edited March 11, 2011 by witch
sted Posted March 10, 2011 Posted March 10, 2011 I definitely need RSAT which I have no downloaded - still a bit nervous though. make sure to install rsat before sp1 or it wont work
witch Posted March 10, 2011 Author Posted March 10, 2011 make sure to install rsat before sp1 or it wont work This is scarier by the minute
SYNACK Posted March 10, 2011 Posted March 10, 2011 Its not too bad, just make a seporate managment machine to start with installed with Windows 7 RC (no SP), join it to the domain and chuck RSAT on, you then need to go into add remove windows features in control pannel and select the RSAT option to enable it. You will then have a set of Administrative tools that you can use just like the ones on the 2003 server. Its a very simmilar GP managment console just on a client PC rather than the server. You'll pick it up in no time. I'd install the rest with integrated SP1 as it is faster and you'll end up with cleaner machines. Also make sure you do a gpupdate /force /boot to force it to pick up changes. I mirror the recomendations to use WMI filtering for user policies and just have a seporate OU for Windows 7 machine accounts. Vista and 7 can work really well with Server 2003 you just need to manage the GPOs from a client machine.
sted Posted March 10, 2011 Posted March 10, 2011 This is scarier by the minute its really not that bad ive had very few issues that wernt silly little teething issues
witch Posted March 10, 2011 Author Posted March 10, 2011 (edited) The machine came with Win7 pro on it but I (luckily) can't see any evidence of a service pack. What's bothering me is recreating all the policies - how do I know I've got them all!! The look of it is OK - my other school has Server2008R2 so I am familiar with it. Any tips on how to make sure I have got all the policies? They are all at different levels and applying to different OUs - from things like printers which are very specific, to much more general ones that are applied to everything. I've had a look at it seems that none of them are being applied ATM I am building this machine to image it so is it possible to add SP1 AFTER I have done the RSAT stuff and will policy management still work after this? I have 32 Win 7 Netbooks to build after these 33 desktops and they will certainly need a new OU and new policies. Edited March 10, 2011 by witch
sted Posted March 10, 2011 Posted March 10, 2011 recreating al policies from one school to another? just use gpmc and back up then restore if its recreating xp policies for win7 you often may not have to most policys will work on both its just a matter of testing and if it starts being odd wmi filter them so they dont apply to win7 boxes
witch Posted March 10, 2011 Author Posted March 10, 2011 Well currently it seems that NONE of them are being applied which is odd. No, I don't want to recreate the policies from one school to the other, (the schools are very different) what I thought I needed to do was recreate them for the Win 7 machines using RSAT as they definitely arent picking up any policies from the server.
SYNACK Posted March 10, 2011 Posted March 10, 2011 The older policies will or at least should apply even if they are for XP, their results can be a little iffy but they still do apply and make the changes to the OS. I would be looking at any problematic network conditions, STP on switches, events in the event log of the client comlaining about network or communication faults etc. I woud do a gpupdate and gpresult as suggested though to try and id the culprit.
PiqueABoo Posted March 10, 2011 Posted March 10, 2011 recreating al policies from one school to another? just use gpmc and back up then restore Just? I programatically import and link a fully formed suite of GPOs from a 'master' system as part of the config for a new off-the-shelf system. Trust me, you might be OK but it is not necessarily that simple: 1) Old-style GPOs may have references to SIDs, computer names and the like that do not exist on the new system - you ought to make a migration table to handle those, but this doesn't work for some of the default CSE extensions e.g. folder redirection settings which live in some INI file as opposed to the GPO's registry.pol(s). 2) GPOs with GPPs are much more prone to the SIDs et al problem because the targeting is so very useful and you will often target OUs, groups etc. Haven't gotten around to checking 2008 R2 (SP1) yet because I'd made the workaround and don't care now, but certainly on 2008 policy imports a migration table did NOT modify preferences either. I have some fiddly code patching GPO registry.pols, INIs and GPP *.xml files from my master to make them perfectly match the new system.
witch Posted March 10, 2011 Author Posted March 10, 2011 I did gpupdate and then gpresult but no policies have been applied - nothing in the event logs. We are talking about just one new machine here, which is on the same switch as the server and there seem not to be any issues. I can browse the network to the server and see all the files. I can log on as a user - any user, so I can't see a problem with the network. The server is before my time - looks OK with some fairly basic policies - I must admit I did think that some of them would be applied to the Windows 7 machine but it seems not. So - do I have two issues here? 1) I need the RSAT to put on new policies and 2) I must have a problem somewhere as no policies are being picked up at all?
sted Posted March 10, 2011 Posted March 10, 2011 its not a firewall issue is it might be worth turning it off to test. also what does rsop.msc say and it might be worth doing a gpupdate /force after see if anything changes might be having issues picking up policies as network taking too long to respond at startup
witch Posted March 11, 2011 Author Posted March 11, 2011 No firewall on machine, only on server. Will try rsop.msc when I get there. I did a gpupdate /force several times and nothing changed. What else can I try?
witch Posted March 11, 2011 Author Posted March 11, 2011 After several more tries, now I have most of the policies applying, but not the curriculum software installation policy or the wallpaper. Also the scripts for font installation and printers aren't running and I still have no shared drives. Advice? I did the rsop.msc thing but I am not sure what I am looking at
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now