none
Ready made template for restricting machines RRS feed

  • Question

  • hi

    is there any Ready made template for restricting client machines using group policy

    I have one already but it is so much restricted so I need something to me reasonable

    Tuesday, April 23, 2013 11:20 AM

Answers

  • Hi,

    It sounds like you are wanting to look at Starter GPOs. These GPO templates contain a lot of additional security settings. You can download them by installing Security Compliance Manager.

    Be aware that you will want to test these settings extremely well before deployment. Finally, the link below explains some additional best practices. With Group Policy, there isn't really a one size fits all template.

    http://blogs.technet.com/b/grouppolicy/archive/2010/01/25/gp-editorial-group-policy-best-practices.aspx


    If my answer helped you, check out my blog (and subscribe): DeployHappiness.com

    • Marked as answer by MAHER0 Wednesday, April 24, 2013 6:37 AM
    Tuesday, April 23, 2013 11:38 AM
  • Am 23.04.2013 13:20, schrieb MAHER0:
    >
    > is there any Ready made template for restricting client machines using
    > group policy
    >
    > I have one already but it is so much restricted so I need something to
    > me reasonable
    >
     
    Not really. For exactly the reason you mention - it "depends" on the
    individual requirements, so it's impossible to provide a "general usage"
    template.
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    • Marked as answer by MAHER0 Wednesday, April 24, 2013 6:37 AM
    Tuesday, April 23, 2013 8:05 PM

All replies

  • Hi,

    It sounds like you are wanting to look at Starter GPOs. These GPO templates contain a lot of additional security settings. You can download them by installing Security Compliance Manager.

    Be aware that you will want to test these settings extremely well before deployment. Finally, the link below explains some additional best practices. With Group Policy, there isn't really a one size fits all template.

    http://blogs.technet.com/b/grouppolicy/archive/2010/01/25/gp-editorial-group-policy-best-practices.aspx


    If my answer helped you, check out my blog (and subscribe): DeployHappiness.com

    • Marked as answer by MAHER0 Wednesday, April 24, 2013 6:37 AM
    Tuesday, April 23, 2013 11:38 AM
  • There is a forum dedicated to Group Policy.  I will move this there.

    -- 
    Paul Bergson
    MVP - Directory Services
    MCITP: Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, Security+, BS CSci
    2008, Vista, 2003, 2000 (Early Achiever), NT4
    http://www.pbbergs.com    Twitter @pbbergs
    http://blogs.dirteam.com/blogs/paulbergson

    Please no e-mails, any questions should be posted in the NewsGroup. This posting is provided "AS IS" with no warranties, and confers no rights.

    Tuesday, April 23, 2013 12:00 PM
  • Am 23.04.2013 13:20, schrieb MAHER0:
    >
    > is there any Ready made template for restricting client machines using
    > group policy
    >
    > I have one already but it is so much restricted so I need something to
    > me reasonable
    >
     
    Not really. For exactly the reason you mention - it "depends" on the
    individual requirements, so it's impossible to provide a "general usage"
    template.
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    • Marked as answer by MAHER0 Wednesday, April 24, 2013 6:37 AM
    Tuesday, April 23, 2013 8:05 PM