locked
how can we manage windows 7 workstation in to windows 2003 domain group policy RRS feed

  • Question

  • we are using windows 2003 domain and windows xp clients,recently we added windows 7 client machine under domain.But the group policy settings are not working in windows 7 machines.How can we update the group policy settings (ADMX files)
    Wednesday, April 7, 2010 11:20 AM

Answers

  • Hi Ashok 2010,

     

    Thank you for posting in Windows Server Forum.

     

    To manage group policy for Windows 7 workstation in a Windows 2003 domain, you may follow the steps below as a best practice.

     

    1.     Create a central store of ADMX files on the PDC role of Windows 2003 domain.

     

     

    1)    Create the root folder for the central store %systemroot%\sysvol\domain\policies\PolicyDefinitions on Windows 2003 domain controller (PDC).

    2)    Create a subfolder of %systemroot%\sysvol\domain\policies\PolicyDefinitions for each language your Group Policy administrators will use. Each subfolder is named after the appropriate ISO-style Language/Culture Name. For a list of ISO-style Language/Culture Names, see Locale Identifiers. For example, to create a subfolder for United States English, create the subfolder: %systemroot%\sysvol\domain\policies\PolicyDefinitions\EN-US.

    3)    Populate the central store with ADMX files

    a.     There is no user interface for populating the central store in Windows 7 or Windows 2008 R2. The following procedure shows how to populate the central store using command line syntax from the domain controller.

    b.    To populate the central store

    4)    Open a command window: Click Start, click Run, and type cmd, and then press ENTER.

    5)    To copy all language-neutral ADMX files (.admx) from your Windows 7 administrative workstation or Window 2008 R2 server to the central store on your domain controller using the copy command, type:

                                                      i.    copy %systemroot%\PolicyDefinitions\* %logonserver%\sysvol\%userdnsdomain%\policies\PolicyDefinitions\

    6)    To copy all ADMX language-specific resource files (.adml) from your Windows Vista administrative workstation to the central store on your domain controller using the copy command, type:

                                                      i.    copy %systemroot%\PolicyDefinitions\[MUIculture]\* %logonserver%\sysvol\%userdnsdomain%\policies\PolicyDefinitions\[MUIculture]\

    b.     For example, to copy all United States English .adml files, type the following:

    c.     copy %systemroot%\PolicyDefinitions\EN-US\* %logonserver%\sysvol\%userdnsdomain%\policies\PolicyDefinitions\EN-US\

    7)    Extend new schemas

    a.     Windows 7 and Windows 2008 R2 supports enhancements that can be configured through Group Policy settings, and those settings are supported by domain controllers running Windows Server 2008 R2. To support these enhancements for an Active Directory service environment consisting of domain controllers running Windows Server 2003 or Windows Server 2003 R2, the Active Directory schema must be extended.

    2.     Install RSAT on Window 7.

    3.     Enable Group Policy Management feature on Windows 7.

    4.     Run gpmc.msc on Win7.

    5.     Edit the policy.

     

    For more information, you can refer to the following technical articles:

     

    How to create a Central Store for Group Policy Administrative Templates in Window Vista

    http://support.microsoft.com/kb/929841

    Enabling Group Policy Preferences Debug Logging using the RSAT

    http://blogs.technet.com/askds/archive/2008/07/18/enabling-group-policy-preferences-debug-logging-using-the-rsat.aspx

    Deploying Group Policy Using Windows Vista

    http://technet.microsoft.com/en-us/library/cc766208(WS.10).aspx

     

    Regards,

    Wilson Jia


    This posting is provided "AS IS" with no warranties, and confers no rights.
    • Proposed as answer by Wilson Jia Thursday, April 8, 2010 2:35 AM
    • Marked as answer by Wilson Jia Tuesday, April 13, 2010 7:56 AM
    Thursday, April 8, 2010 2:34 AM

All replies

  • Hi Ashok 2010,

     

    Thank you for posting in Windows Server Forum.

     

    To manage group policy for Windows 7 workstation in a Windows 2003 domain, you may follow the steps below as a best practice.

     

    1.     Create a central store of ADMX files on the PDC role of Windows 2003 domain.

     

     

    1)    Create the root folder for the central store %systemroot%\sysvol\domain\policies\PolicyDefinitions on Windows 2003 domain controller (PDC).

    2)    Create a subfolder of %systemroot%\sysvol\domain\policies\PolicyDefinitions for each language your Group Policy administrators will use. Each subfolder is named after the appropriate ISO-style Language/Culture Name. For a list of ISO-style Language/Culture Names, see Locale Identifiers. For example, to create a subfolder for United States English, create the subfolder: %systemroot%\sysvol\domain\policies\PolicyDefinitions\EN-US.

    3)    Populate the central store with ADMX files

    a.     There is no user interface for populating the central store in Windows 7 or Windows 2008 R2. The following procedure shows how to populate the central store using command line syntax from the domain controller.

    b.    To populate the central store

    4)    Open a command window: Click Start, click Run, and type cmd, and then press ENTER.

    5)    To copy all language-neutral ADMX files (.admx) from your Windows 7 administrative workstation or Window 2008 R2 server to the central store on your domain controller using the copy command, type:

                                                      i.    copy %systemroot%\PolicyDefinitions\* %logonserver%\sysvol\%userdnsdomain%\policies\PolicyDefinitions\

    6)    To copy all ADMX language-specific resource files (.adml) from your Windows Vista administrative workstation to the central store on your domain controller using the copy command, type:

                                                      i.    copy %systemroot%\PolicyDefinitions\[MUIculture]\* %logonserver%\sysvol\%userdnsdomain%\policies\PolicyDefinitions\[MUIculture]\

    b.     For example, to copy all United States English .adml files, type the following:

    c.     copy %systemroot%\PolicyDefinitions\EN-US\* %logonserver%\sysvol\%userdnsdomain%\policies\PolicyDefinitions\EN-US\

    7)    Extend new schemas

    a.     Windows 7 and Windows 2008 R2 supports enhancements that can be configured through Group Policy settings, and those settings are supported by domain controllers running Windows Server 2008 R2. To support these enhancements for an Active Directory service environment consisting of domain controllers running Windows Server 2003 or Windows Server 2003 R2, the Active Directory schema must be extended.

    2.     Install RSAT on Window 7.

    3.     Enable Group Policy Management feature on Windows 7.

    4.     Run gpmc.msc on Win7.

    5.     Edit the policy.

     

    For more information, you can refer to the following technical articles:

     

    How to create a Central Store for Group Policy Administrative Templates in Window Vista

    http://support.microsoft.com/kb/929841

    Enabling Group Policy Preferences Debug Logging using the RSAT

    http://blogs.technet.com/askds/archive/2008/07/18/enabling-group-policy-preferences-debug-logging-using-the-rsat.aspx

    Deploying Group Policy Using Windows Vista

    http://technet.microsoft.com/en-us/library/cc766208(WS.10).aspx

     

    Regards,

    Wilson Jia


    This posting is provided "AS IS" with no warranties, and confers no rights.
    • Proposed as answer by Wilson Jia Thursday, April 8, 2010 2:35 AM
    • Marked as answer by Wilson Jia Tuesday, April 13, 2010 7:56 AM
    Thursday, April 8, 2010 2:34 AM
  • Thanks Wilson.
    Monday, April 12, 2010 6:20 AM
  • Wilson,

    These are very good instructions, but I do have one question. What steps are required in step 7 to extend the new schemas?

    Thank you.

    Andy

    Tuesday, December 14, 2010 3:27 PM
  • Just followed the instructions here to extend schema

    http://technet.microsoft.com/en-us/library/cc773360(WS.10).aspx

     

    Sunday, December 19, 2010 7:46 PM