Group Policy RRS feed

  • Question

  • i want to know what are the feature available in Group Policy in AD server 2008.

    i want to know which are the feature enable in Default Group Policy in AD server 2008.

    Is there any best practise to follow while configuring group policy for small business.

    Friday, April 8, 2011 9:45 AM


  • To check which settings are enable in the Default Domain Group Policy, you can proceed by two ways:

    • Run gpmc.msc and go to the Default Domain Group Policy and then check which settings are applied
    • Create a new OU under domain level: put a user and a computer there and then run rsop or gpresult to check which group policy settings are applied (Don't link a group policy to the OU so that you get only settings that are applied by the Default Group policy on the user / computer)

    There is a lot of new settings that had been added on AD 2008.

    You can start by GPP (Group Policy Preferences):

    Also, you should know the new ADMX templates:

    Don't forget to have a look to group policy Central Store:

    For SBS questions, please post in SBS forum:

    To check which group policy settings are applied on a user / computer use rsop / gpresult.



    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner

    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration


    Friday, April 8, 2011 9:53 AM
  • if you are looking for "what settings should I set for my small business", that's not an easy one to answer.
    it all depends on what experience you want to deliver, and what risks/controls you think you need.
    the Starter GPO's aren't likely what you need, but the documentation for them is pretty good at illustrating some things you should think about.
    the Starter GPO's focus on the security aspects, and it's not clear if security is your interest or not.
    Saturday, April 9, 2011 5:15 AM

All replies