GPO Deployment - how do you do things?

[soveryapt]

Right, so I'm just overhauling the whole install procedure here for over the summer, trying to get my base images down and then be a bit more targeted with the software deployments, so I'm just wondering how you folks do it.

 

Do you have a GPO per set of machines that has all the installs in for that group (ICT Suites, Science Rooms, Music Rooms etc) or do you have a GPO for each set of software and then target the deployment based on security groups and what not?

 

I'm currently using the all in one for the main software that is used school wide with niche GPOs for the odd installs else where, so would be good to hear what others do and why.

 

Thanks

[SYNACK]

I break it up using OUs and build the machine with MDT and a dropdown of OUs to choose from.

[cpjitservices]

PC's in OU's for different Departments with GP's assigned to PC's if needed, same for users - broken down into departments and in GP the users get assigned GP's depending on what OU they are in. PC's are all built with MDT and OU specified in build process, With us having departments and PC's belonging to departments at the build process we specify which OU the PC belongs to and then it updates with the correct policeis for that OU.

 

Software - We roll out through GP and if for some reason it cant be rolled out through GP I'll add the program into MDT as an application and re-image the machine to install it that way. Software that is rolled out in GP is also done at OU / Department level, but we also have a "General Software" OU which all machines are assigned to so they can pull things like Firefox, Chrome, Notepad++ etc etc.

 

Works well, when I first did all of this it was a rushed job and everything was a mess but the past 6 months I've restructured everything and things are a lot easier now.

[chazzy2501]

most of my computer OUs are geographical. I have a GPO software install for each piece of software that I'll link to a certain OU.

 

My user OUs are divided by type. Teacher,Pupil,Admin. Each inheriting a common GPO from the Parent OU they reside in. GPOs for Iternet Printer Drive maps etc for their specific OU.

 

This is something you should decide when setting up your ADs schema. But I inherited mine.

[cromertech]

I break it up using OUs and build the machine with MDT and a dropdown of OUs to choose from.

 

Can you get MDT to give you a list of OUs. I would like this if you could point me in the right direction. I currently have MDT placing new computers in 1 ou that then need to be moved manually. Fine until you need to install a whole suite

 

Back on topic I have each software package in its own GPO and then add then to the ous for each department/IT room as needed

Edited June 21, 2012 by cromertech

[garethEds]

I break it up using OUs and build the machine with MDT and a dropdown of OUs to choose from.

 

Hi SYnack,

 

Which script do you use for OU choice in MDT? I have seen a script on one of the blogs but didn't quite understand where to put it.

 

Cheers

 

Gareth

[SYNACK]

Can you get MDT to give you a list of OUs. I would like this if you could point me in the right direction.

 

There are a couple of ways to do it:

Back to Basic

 

Works really well as you don't have to mess about remembering OUs.

 

You can also add freindly names if nessisary but it involves changing more stuff:

http://deployment.xtremeconsulting.com/category/mdt-2010/page/2/

Edited June 21, 2012 by SYNACK

[soveryapt]

There are a couple of ways to do it:

Back to Basic

 

Works really well as you don't have to mess about remembering OUs.

 

You can also add freindly names if nessisary but it involves changing more stuff:

MDT 2010 « Xtreme Deployment

 

I was about to ask how you did this too! lol .. Thanks!