msaario

I don't think he has a clear understanding of what SCCM does and doesn't do. @synaesthesia will keep you posted and you'll be on the my list of people to let know the moment it happens!

Thanks for the reply. I think you hit the nail on the head, he remains the expert and the invaluable to the our team. There is him and his work buddy (whom belong to the same team) who seem to think they are invaluable, and we should do what they say no matter what because in the past all the other IT teams have bowed to them as they owned the keys to the kingdom and held the knowledge. I've (and my team) only joined the organization through a merger (take-over) and from what I understand he has been in that role for the past 15-20+ years as in most of the other IT guys in the team there, and I'm only guessing that he doesn't have any MS certs...

Hey thanks for the replies, All he said was "NO", he didn't give reasons why. He seems to do this when he knows his idea is wrong and has no solid footings to stand on, but no one is willing to stand up to him. His manager wasn't impressed with his attitude in the meeting and is happy for us (me) to investigate. Having little experience with GPO's, hence why I'm gathering evidence to no reasons why he shouldn't implement Domain GPO's and not LGPO's.

Hi, Just landed myself a new role as MOE\SOE engineer for a university for somewhere around 600 student machines across 3 sites, and working on building a new image for the student environment. There current image\setup uses Deep freeze, and once the student has finished using the machine, it reboots and restores itself. Not the best user experience hence why we want to create a new student image. They have just implemented Microsoft SCCM 2012 R2 which is a relief!, however we had a heated discussion the other day with the sysadmin/domain admin guy who flatly refused to use Domain GPO's - even though his moto and catch phrase is "KISS - Keep It Simple Stupid" and hates Best Practices. He said that we can use SCCM to deploy the reg key's with the values set in them instead of using GPO's. My plan was to put them into the 'Master' image but the SysPrep step strips out the all these settings, so I'm going to have to export all the individual Local GPO's to Local Policy files\pack (using Microsoft's Security Compliance Manager) and then restore them back when the Task sequence is run at image deployment time. Can anyone recommend any other way to do it?, or problems that I might face? I'm not looking forward to managing possibly hundreds of Local Policy files because of he's KISS principle. Thanks in advance.