Re: Group Policy Recommendations

"Utahduck" <Utahduck@xxxxxxxxxxx> wrote in message
news:1176921476.444576.83460@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
We are implementing group policies within our Microsoft Windows Active
Directory Service and I am looking for ideas on which group policies
have been effective to implement within a domain. Also, what are some
of the group policies you have implemented but later removed? Detail
on why you went with or without certain policies would be welcomed,
too.

Any detail, experience, and insight would be highly appreciated! I'd
also love links or attachments of white papers and case studies that
would add some guidance and suggestions.

Thank you for your time,
-Utah


All of the policies are effective.
It is a matter of whether you want/need to effect what they do
in your environment. There are all sorts of policies, and the
number continues to grow, and these are used for many kinds
of purposes. If you are concerned about hardening your
Windows systems then check out the Windows Server 2003
Security Guide and the Threats and Countermeasures Guide
http://www.microsoft.com/technet/security/guidance/default.mspx

Else, you can find much info by just drilling in at
http://www.microsoft.com/gp
for example in the downloads you will find a paper with some
reference implementations for a set of scenarios, the Group
Policies Common Scenarios download (listed in)
http://www.microsoft.com/downloads/results.aspx?displaylang=en&freeText=Group+Policy

If you were to look at a number of MS solutions whitepapers,
for mid-size businesses, for compliance, etc. you will find
some info on how GP can be applied for their objectives.

It all comes down to what you need and what your objectives
are in which priority.

Roger


.

Relevant Pages

  • Re: Assigning File and Folder Permissions Via Group Policy
    ... still pretty new to group policies and so wanted to double-check my ... so a few policies with a lot of settings in each policy may ... or two settings also may not be the best solution. ...
    (microsoft.public.windows.group_policy)
  • Re: Incorporate .exe into bootup
    ... Policies are great, but are a pain to figure out. ... them, but for your login banner, look in your default domain ... >> What about just using group policies to specify a login banner, ... You can't do much on Win9x clients that they ...
    (microsoft.public.windows.server.networking)
  • Re: Can not make local printer available in a remote desktop session
    ... To look at the Group Policies run gpedit.msc on the Remote Desktop ... I’d like to make my local printer available in a remote desktop session. ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Group Policy Recommendations
    ... Directory Service and I am looking for ideas on which group policies ... Policies Common Scenarios download http://www.microsoft.com/downloads/results.aspx?displaylang=en&freeTe ... ... It all comes down to what you need and what your objectives ...
    (microsoft.public.win2000.group_policy)
  • Re: Single User/Group Deny Access
    ... I did mean group policies. ... up for me) I'll have to go and check out the permissions on the shares. ... Group Policies linked to the Domain perhaps? ... flexibility as other GPO settings NOR is it convenient until you are good ...
    (microsoft.public.windows.server.active_directory)
Loading