Re: GPO Question
From: Darren Mar-Elia (dmanonymous_at_discussions.microsoft.com)
Date: 09/15/04
- Next message: Ken B: "Re: GPO Question"
- Previous message: Jason: "Password Policy and GPO's"
- In reply to: Ken B: "Re: GPO Question"
- Next in thread: Ken B: "Re: GPO Question"
- Reply: Ken B: "Re: GPO Question"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 15 Sep 2004 11:55:30 -0700
Ken-
You can continue to create and edit GPOs from Win2K. If you create a GPO on
Win2K, it will have Win2K ADMs so as soon as it is opened by an XP, SP2
machine, the GPO will be updated. One thing to keep in mind is that there is
an issue with editing GPOs that have been updated with SP2 from non-SP2
machines. There is a hotfix you should apply to your Win2K boxes. Its
described at http://support.microsoft.com/default.aspx?kbid=842933
-- Darren Mar-Elia MS-MVP-Windows Management http://www.gpoguy.com "Ken B" <none@microsoft.com> wrote in message news:ui5c2%230mEHA.2764@TK2MSFTNGP11.phx.gbl... > Thanks Darren- > > That makes sense to me... just one other question, so I'll know what to > expect. What would happen if I did update the ADM files on the DC to > XP2... > would I be able to create/edit new GP's on the DC, or would I be forced to > update from an XP workstation? > > Thanks again > > Ken > > > "Darren Mar-Elia" <dmanonymous@discussions.microsoft.com> wrote in message > news:%23avB$l0mEHA.3464@tk2msftngp13.phx.gbl... >> Um, Jerold, that doesn't really answer the question. Installing the > adminpak >> doesn't really address this issue. Ken, the issue really is how do you >> upgrade and edit your GPOs going forward. Let's say you have XP, SP2 >> installed and you want to update existing GPOs with the new ADMs that >> come >> with SP2. The default behavior is that if you create a new GPO or open >> one >> of your existing domain-based GPOs from an XP, SP2 workstation using the > GP >> Editor, the newer ADMs are automatically copied up to the SYSVOL portion > of >> that GPO and the GPO is "updated". Now, if you have existing policy > settings >> in that GPO, chances are they are still supported in the newer ADM > templates >> and so you'll still see them. If for some reason the new ADMs don't > include >> an old setting that you had implemented, then that setting will be >> "orphaned", but you will see it under the "Extra registry settings" > section >> if you view the settings of that GPO using GPMC. >> >> Now, going forward, my rule of thumb is that once you start updating your >> GPOs to the latest version, I think its easiest if you can always edit > them >> using that version of the OS, but in some cases that may not be feasible. >> So, what I would recommend is that, on any Windows 2000 systems, you > enable >> the policy that prevents automated updating of ADMs, just in case somehow > a >> newer ADM gets onto one of your Win2K systems. This policy is available >> on >> both Win2K and XP and is found under User Configuration|Admin >> Templates|System|Group Policy|Turn off Automatic Update of ADM files >> >> Hope that helps. Let me know if you have questions. >> >> -- >> Darren Mar-Elia >> MS-MVP-Windows Management >> http://www.gpoguy.com >> >> >> >> "Jerold Schulman" <Jerry@jsiinc.com> wrote in message >> news:lktgk0hl9q237bp83ffqmi03r0mf1srojo@4ax.com... >> > On Wed, 15 Sep 2004 11:59:53 -0400, "Ken B" <none@microsoft.com> wrote: >> > >> >>Here's one for the group.... I have a 2000 domain, with a good mix of > 2000 >> >>and XP clients. I want to take advantage of the XP adm files so I can >> >>policify those more closely. I know to copy the adm files from an XP >> >>workstation to the server, but the only things holding me up on it is > that >> >>I >> >>have policies already set up. >> >> >> >>If I change the ADM files on the server, will I lose the configuration >> >>that's been done to those policies already? >> >> >> >>If I don't lose the configured policies, will I still be able to edit > said >> >>policies down the road, or would I have to re-create them if I want to >> >>edit? >> >> >> >>Would I be _REQUIRED_ to edit GP's from an XP workstation, or would I >> >>be >> >>able to still edit them on a 2000 DC? >> >> >> >>TIA---you'll be saving me a ton of time and making life easier! >> >> >> >>Ken >> >> >> > Install the Windows Server Adminpak.msi file on XP and administer from >> > there. >> > >> > See tip 6598 in the 'Tips & Tricks' at http://www.jsiinc.com >> > >> > Jerold Schulman >> > Windows: General MVP >> > JSI, Inc. >> > http://www.jsiinc.com >> >> > >
- Next message: Ken B: "Re: GPO Question"
- Previous message: Jason: "Password Policy and GPO's"
- In reply to: Ken B: "Re: GPO Question"
- Next in thread: Ken B: "Re: GPO Question"
- Reply: Ken B: "Re: GPO Question"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
