none
group policy central store

    Question

  • We have migrated from windows 2003 to Windows 2008 R2 domain controlers
    and users have Windows 7 machines

    Now, I am considering to use group policy central store and we have about 8 different locations.  Each location has one or two Windows 2008 R2 domain controllers. 

    So, I just need to copy policydefinitions to \\mydomain\sysvol\mydomain\policies on ONE domain controller, right?  what about some servers that needs local group policy?

    After reading http://blogs.technet.com/b/askds/archive/2009/12/09/windows-7-windows-server-2008-r2-and-the-group-policy-central-store.aspx and hestiate to create the central store as it said:

    "Thank you for making clear that the "Central Store" is not the solution for all the problems of the past. In fact, it adds some new. "

    Can anyone help me whether it's better to create the central store or not? 

    Thank you.

    Friday, April 13, 2012 4:29 PM

Answers

  • Your mentioned your domain controllers and workstations are NT6.1, then the issue mentioned in the article will not occur.

    This only becomes and issue if you have Windows NT6.0 and earlier systems trying to manage an NT6.1 version central store.

    • Marked as answer by SGryzbowski Friday, April 20, 2012 2:32 PM
    Friday, April 13, 2012 7:12 PM
  • The primary goal of moving to a central store is to reduce the size of Sysvol on all the DC's, and replication of this between the DC's. All templates are stored on one DC, that DC is backed up.

    Servers that need local policies should not be effected, these are only for AD Group Policies. However, you should aim to only use Group Policies for all servers, it's a better way of managing your environment, especially if it will get larger in future.

    • Marked as answer by SGryzbowski Friday, April 20, 2012 2:32 PM
    Sunday, April 15, 2012 4:19 PM

All replies

  • Your mentioned your domain controllers and workstations are NT6.1, then the issue mentioned in the article will not occur.

    This only becomes and issue if you have Windows NT6.0 and earlier systems trying to manage an NT6.1 version central store.

    • Marked as answer by SGryzbowski Friday, April 20, 2012 2:32 PM
    Friday, April 13, 2012 7:12 PM
  • The primary goal of moving to a central store is to reduce the size of Sysvol on all the DC's, and replication of this between the DC's. All templates are stored on one DC, that DC is backed up.

    Servers that need local policies should not be effected, these are only for AD Group Policies. However, you should aim to only use Group Policies for all servers, it's a better way of managing your environment, especially if it will get larger in future.

    • Marked as answer by SGryzbowski Friday, April 20, 2012 2:32 PM
    Sunday, April 15, 2012 4:19 PM