Windows 7 Group Policy on 2003 Server

[karldenton]

Hi,

 

Can you manage Windows 7 specific settings via a Server 2003.

 

I have read that if you don't have a 2008 server, you have to get a Windows 7 machine and specifically use that for editing the policies.

 

) Get a server 2008 r2 disc

2) Login to a Windows 7 SP1 or 2008 R2 SP1 system as your domain admin account (must have schema admin permission)

3) Extend the schema & domain (Prepare Your Infrastructure for Upgrade)

4) Dedicate a workstation or server for the sole purpose of managing the Windows 7 / 2008 R2 GPOs

5) Install the RSAT Tools for Win7 SP1 (Download: Remote Server Administration Tools for Windows 7 with SP1 - Microsoft Download Center - Download Details) OR Use 2008R2 SP1's Server Manager and install RSAT tools from there

6) You can now manage Windows 7 / Server 2008 GPO objects for your domain. These policies *MUST* be created & managed by this machine until you install Server 2008 R2 domain controllers

 

Has anyone else experience of this ?

 

Thanks

[glen_j]

yeah i have just done exactly the same thing, after you install rsat on the windows 7 pc you can edit and create windows 7 group policy settings from the windows 7 pc, you'll also need to create a central store for your group policy templates How to create a Central Store for Group Policy Administrative Templates in Window Vista

[karldenton]

Thanks Glen. As long as I know its do-able.

 

Karl

[Michael]

Yes, I can confirm this is the way to do it, but a 2008 R2 server makes things that little bit easier.

 

I find RSAT is easier if I am at a workstation and I want to make the odd change. I prefer setting up new domains or upgrading domains with a 2008 R2 server in place.

[karldenton]

Thanks Michael, I'll probably get a 2008 R2 server to make it easier then. I take it that you can manage the GP's without it been a DC ?

[Michael]

If you were to install a 2008 R2 Server, you should make it a DC. You can have a 2003 R2 (32Bit) and 2008 R2 (64Bit) DC for example in the same domain.

 

It's simply a case of upgrading the schema to 47 on your existing 2003 Server, joining a 2008 R2 Server to your network, then running dcpromo and promoting it to a domain controller. This will install Active Directory and Group Policy Management.

[ChrisH]

The Angry Technician’s Guide to Managing Windows 7, you Idiots « The Angry Technician

[gshaw]

That is one very angry technician!

 

Just about to move ours to 2008 R2 this week, only taken this long due to not having driver support on our old servers... no such problems with VMWare

 

Although there's not a technical reason for having older DCs I prefer to have my server and desktop OS in step so everything is running at the same generation of software... slightly OCD perhaps but works for me

[Michael]

I agree with you in terms of desktops definitely, but in all my networks I still have at least one 2003 member server and talking from experience, a 2003 R2 and 2008 R2 DC do work together absolutely fine.

 

I recently (in some cases) demoted these 2003 R2 servers and promoted the network to 2008 R2 functional level. It brings some new tools, but not many I must admit.