none
Group Policy RRS feed

  • Question

  • i want to know what are the feature available in Group Policy in AD server 2008.

    i want to know which are the feature enable in Default Group Policy in AD server 2008.

    Is there any best practise to follow while configuring group policy for small business.

    Friday, April 8, 2011 9:45 AM

Answers

  • To check which settings are enable in the Default Domain Group Policy, you can proceed by two ways:

    • Run gpmc.msc and go to the Default Domain Group Policy and then check which settings are applied
    • Create a new OU under domain level: put a user and a computer there and then run rsop or gpresult to check which group policy settings are applied (Don't link a group policy to the OU so that you get only settings that are applied by the Default Group policy on the user / computer)

    There is a lot of new settings that had been added on AD 2008.

    You can start by GPP (Group Policy Preferences):http://technet.microsoft.com/en-us/library/cc731892(WS.10).aspx

    Also, you should know the new ADMX templates: http://technet.microsoft.com/fr-fr/library/cc709647(WS.10).aspx

    Don't forget to have a look to group policy Central Store: http://technet.microsoft.com/en-us/windowsserver/bb986287.aspx

    For SBS questions, please post in SBS forum:

    http://social.technet.microsoft.com/Forums/en-US/smallbusinessserver/threads

    To check which group policy settings are applied on a user / computer use rsop / gpresult.

     

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner

    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

     


    Friday, April 8, 2011 9:53 AM
  • if you are looking for "what settings should I set for my small business", that's not an easy one to answer.
    it all depends on what experience you want to deliver, and what risks/controls you think you need.
    the Starter GPO's aren't likely what you need, but the documentation for them is pretty good at illustrating some things you should think about.
    http://technet.microsoft.com/en-us/library/dd367854(WS.10).aspx
    the Starter GPO's focus on the security aspects, and it's not clear if security is your interest or not.
    Don
    Saturday, April 9, 2011 5:15 AM

All replies